Strategic Cyber Analyst

Company Overview

By Light Professional IT Services LLC readies warfighters and federal agencies with technology and systems engineered to connect, protect, and prepare individuals and teams for whatever comes next. Headquartered in McLean, VA, By Light supports defense, civilian, and commercial IT customers worldwide.

Position Overview

By Light is seeking a Strategic Cyber Operations Analyst to support DCDC cyberspace operations through mission coordination, operational analysis, documentation, information management, and support to the broader cyber operational picture. The ideal candidate will bring experience in cyber operations, intelligence, planning, or mission support and be comfortable working across operational, technical, and leadership teams to understand mission requirements, organize complex information, and translate cyber activities into clear, actionable products for developers, leadership, and staff.

Responsibilities

Perform cyber threat analysis, cyber fusion, and defensive cyber analysis supporting operational mission requirements.

Analyze network, host, endpoint, and security telemetry to identify anomalous or potentially malicious activity.

Conduct threat hunting across enterprise and mission networks using available security data and intelligence.

Analyze network traffic, security events, alerts, logs, and endpoint artifacts to identify indicators of compromise and adversary activity.

Support incident detection, investigation, response, containment, and recovery activities.

Correlate information from multiple intelligence and cybersecurity sources to develop actionable cyber assessments.

Utilize SIEM, network analysis, packet inspection, endpoint security, and forensic tools to support cyber investigations.

Apply threat intelligence and frameworks such as MITRE ATT&CK to identify adversary tactics, techniques, and procedures.

Support vulnerability assessment and analysis activities and assist in identifying potential attack paths and areas of mission risk.

Develop clear technical findings, operational reports, briefings, and recommendations for mission leadership.

Collaborate with cyber operators, intelligence analysts, network defenders, system administrators, mission planners, and other technical teams.

Support continuous cyber operations and shift-based mission requirements when required.

Mentor less-experienced analysts and contribute to development of team processes, techniques, procedures, and operational best practices.

Support Cyber Protection Team and Cyber Mission Force operations, exercises, mission preparation, and operational readiness activities as required.

Required Experience/Qualifications

Experience supporting cybersecurity, cyber defense, Defensive Cyber Operations, cyber threat analysis, incident response, threat hunting, network analysis, digital forensics, or a related cyber mission.

Working knowledge of network protocols, operating systems, cybersecurity concepts, and common adversary techniques.

Experience analyzing security events, network traffic, endpoint activity, logs, alerts, or other cybersecurity telemetry.

Experience working in an operational environment where timely analysis and mission-focused decision making are required.

Ability to analyze complex technical information and communicate findings clearly to both technical and operational audiences.

Ability to work independently and collaboratively within a fast-paced cyber mission environment.

DoD 8140-compliant cybersecurity certification appropriate to the assigned work role.

Preferred Experience/Qualifications

Basic understanding of SharePoint out-of-the-box features.

Experience supporting USCYBERCOM, CNMF, JFHQ, DODIN, COCOM, Service Cyber Component, NSA, IC, or other cyber mission organizations.

Experience with cyberspace operations, offensive cyber operations, defensive cyber operations, DODIN operations, SIGINT, information operations, cyber intelligence, targeting, operational planning, or mission assurance.

Experience supporting operational documentation such as SOPs, CONOPs, TTPs, orders, briefings, trackers, lessons learned, after-action products, or decision-support materials.

Experience participating in or supporting working groups, operational planning teams, coordination meetings, battle rhythms, or cross-functional mission efforts.

SharePoint experience creating sites, editing pages, maintaining lists, managing libraries, updating content, and adjusting site permissions.

Familiarity with SharePoint Designer or similar collaboration/content management tools.

Records Management experience.

Experience with metadata tagging, document organization, content governance, or maintaining authoritative repositories.

Experience identifying operational gaps and recommending improvements to coordination, documentation, reporting, or information-sharing practices.

Bachelor’s degree in Cybersecurity, Intelligence Studies, Information Systems, Business, Military Studies, Knowledge Management, or a related field. Relevant operational experience may be considered in lieu of degree.

Special Requirements/Security Clearance

Active DoD TS/SCI clearance

Salary Range

Based on the roles, responsibilities, and requirements, the projected pay range for this position is: $155,000 - $175,000.

The annual base salary provided is a guideline for this position and is not a guarantee of compensation or salary. When extending an offer, By Light also considers other variables such as (but not limited to) work experience, education, training, skill set, internal peer equity, clearance level, and market conditions. In addition, By Light provides an extensive selection of benefits and offerings to our employees.