Cyber Fusion Analyst (TS/SCI)

About the role

Zachary Piper Solutions is seeking a Sr. Cyber Fusion Analyst to support the Department of Defense’s ongoing mission for the Cyber Defense Command at Ft. Meade, MD. The analyst will produce and disseminate all-source integrated intelligence analysis to support DODIN and defensive cyberspace operations. Clearance: TS/SCI required. Location: Ft. Meade, MD (100% onsite). The position opens for applications on 8/7/2026 and will accept applications for at least 30 days from the posting date.

Responsibilities

• Utilize network monitoring and detection tools, including NetFlow, IDS, protocol logs, and PCAP data, to identify malicious cyber activity.
• Support the development of Cyber Fusion SOPs, frameworks, and methodologies aligned with industry and Department of War standards.
• Identify enterprise threats and recommend mitigation strategies to strengthen security and reduce risk.
• Analyze threat intelligence, OSINT, and vulnerability data to prioritize response and remediation efforts.
• Assess and document adversary tactics, techniques, and procedures (TTPs) and their impact on the operational environment.
• Detect and investigate adversary activity, anomalies, and suspicious events across logs, SIEMs, and security monitoring platforms.
• Conduct compromise assessments and produce analytical reports and attack lifecycle visualizations.
• Provide risk assessments and security recommendations based on threat, intelligence, and vulnerability analysis.
• Recommend enhancements to cyber defense measures protecting the Department of War Information Network (DOWIN).
• Track and analyze cybersecurity metrics and trends to deliver actionable situational awareness.

Qualifications

• Bachelor’s degree in related discipline and 8+ years of experience with cyber threat intelligence analysis.
• Provide intelligence analysis and assessments to support joint military cyber planning efforts, including operational plans, Annex B development, and planning groups.
• Knowledge of network and application protocols, cyber vulnerabilities and exploitation techniques, and cyber threat/adversary methodologies.
• Experience with datasets, tools, and protocols that support analysis (e.g., passive DNS, Virus Total, Recorded Future, TCP/IP, OSI, WHOIS, enumeration, threat indicators, malware analysis results, Wireshark, Splunk, Arcsight, etc.).
• Experience with various open-source and commercial vendor portals, services, and platforms that provide insight into how to identify and/or combat threats or vulnerabilities to the enterprise.
• Proficiency working with various types of network data (e.g., NetFlow, PCAP, custom application logs).

Pay

Total compensation based on experience level - $130,000-$155,000+.

Benefits

• PTO/Holidays
• Cigna Medical, Dental, and Vision
• 401k with ADP
• Certification reimbursement
• Contract stability funded through 2030