{"id":2216084,"url":"https://alion.io/job/peraton-cirt-tier-2-analyst","title":"CIRT Tier 2 Analyst","company":{"id":722,"name":"Peraton","domain":"peraton.com","url":"https://alion.io/company/peraton","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"iCIMS","truth_index":{"grade":"A","score":100,"open_postings":8,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":7,"computed_at":"2026-10-13T05:45:00Z"}},"role":"Analytics","role_family":"Analytics","seniority":"junior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Beltsville, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":80000,"max":128000,"currency":"USD","period":"year","gross":null,"usd_annual":128000},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Autopsy","optional":false},{"name":"Azure","optional":false},{"name":"Crowdstrike","optional":false},{"name":"KAPE","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"MITRE D3FEND","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"ServiceNow","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"Volatility","optional":false}],"status":"live","first_seen_at":"2026-10-10T08:21:35Z","employer_posted_date":"2026-10-10","last_verified_at":"2026-10-14T00:23:58Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Responsibilities\nPeraton is seeking an experienced CIRT Tier 2 Analyst to join Peratons' Federal Strategic Cyber Mission program.\nLocation: Beltsville, MD; On-site\nWork Hours: Days Shift, 06:00- 14:00 EST, SUN-THU.\nIn this role, you will:\nDetect, classify, process, track, and report on cyber security events and incidents.\nPerform advanced in-depth analysis of coordinated Tier 1 alert triage and requests in a 24x7x365 environment.\nAnalyze logs from multiple sources (e.g., host logs, EDR, firewalls, intrusion detection systems, servers) to identify, contain, and remediate suspicious activity.\nCharacterize and analyze network traffic to identify anomalous activity and potential threats.\nProtect against and prevent potential cyber security threats and vulnerabilities.\nPerform forensic analysis of hosts artifacts, network traffic, and email content.\nAnalyze malicious scripts and code to mitigate potential threats.\nConduct malware analysis to generate IOCs to identify and mitigate threats.\nCollaborate with Department of State teams to analyze and respond to events and incidents.\nMonitor and respond to the CIRT Security Orchestration and Automation Response (SOAR) platform, hotline, email in-boxes.\nCreate tickets and initiate workflows as instructed in technical SOPs.\nCoordinate and report incident information to the Cybersecurity and Infrastructure Security Agency (CISA).\nCollaborate with other local, national and international CIRTs as directed.\nSubmit alert tuning requests.\nQualifications\nRequired:\nBachelor's degree and 2 years of experience.An additional 4 years of experience may be substituted in lieu of the degree bachelors degree requirement.\n\nTo be considered for this position, applicants must either currently hold one of the professional certifications listed below or obtain one prior to their start date (Continued certification is required as a condition of employment):CCNA-Security, CND, CySA+, GICSP, GSEC, Security+ CE, SSCP\n\nDemonstrated experience in the Incident Response lifecycle.\nKnowledge of SOAR ticketing and automated response systems (e.g. ServiceNow, Splunk SOAR, Microsoft Sentinel).\nDemonstrated experience with using Security Information and Event Management (SIEM) platforms (e.g. Splunk, Microsoft Sentinel, Elastic, Q-Radar).\nDemonstrated experience in using Endpoint Detection and Response systems (e.g. MDE, ElasticXDR, CarbonBlack, Crowdstrike).\nKnowledge of cloud security monitoring and incident response.\nKnowledge of integrating IOCs and Advanced Persistent Threat actors.\nAbility to analyze cyber threat intelligence reporting and understanding adversary methodologies and techniques. \nKnowledge of malware analysis techniques.\nKnowledge of the MITRE ATT&CK and D3FEND frameworks.\nU.S. Citizenship required.\nActive Secret security clearance required in order to start.\nPreferred:\nProficiency with Splunk for security monitoring, alert creation, and threat hunting.\nKnowledge of Microsoft Azure access and identity management.\nProficiency with Microsoft Defender for Endpoint and Identity for security monitoring, response, and alert generations.\nExperience in using digital forensics collection and analysis tools (e.g. Autopsy, MagnetForensics, Zimmerman Tools, KAPE, CyLR, Volatility).\nExperience with using ServiceNow SOAR for ticketing and automated response.\nKnowledge of Python, PowerShell and BASH scripting languages.\nExperience with cloud security monitoring and incident response.\nDemonstrated ability to perform static/dynamic malware analysis and reverse engineering.\nExperience with integrating cyber threat intelligence and IOC-based hunting.\nTechnical certifications such as:Security+, CySA+, Cloud+, Try Hack Me SAL1, Hack the Box CDSA, CyberDefenders, CCD, Azure SC-900, CCSP, GCIH, CCSK, GSEC, CHFI, GCLD, GCIA\n\nAdvanced technical certifications such as:SecurityX/CASP+, PRMP, GREM, GEIR, GNFA, or GCFA\n\nPeraton Overview\nPeraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.\nTarget Salary Range\n$80,000 - $128,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.EEO\nEEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.","description_format":"text","description_chars":5358,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","National Security","Security Operations","Homeland Security"],"lifecycle":[{"event":"open","at":"2026-10-10T08:21:35Z"}],"visa":[],"liveness":{"score":70,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.777,"p_room":0.9,"age_days":2,"expected_fill_days":7,"reasons":["conf:1","win:mid","comp:junior,brand"],"computed_at":"2026-10-13T05:45:00Z"},"pay":{"stated_usd_annual":128000,"is_top_pay":true},"html_url":"https://alion.io/job/peraton-cirt-tier-2-analyst","json_url":"https://alion.io/job/peraton-cirt-tier-2-analyst.json","meta":{"generated_at":"2026-10-14T01:34:03Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2372,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":722},"rest":"https://alion.io/mcp/rest/get_company?id=722"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fperaton-cirt-tier-2-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fperaton-cirt-tier-2-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fperaton-cirt-tier-2-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/peraton-cirt-tier-2-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fperaton-cirt-tier-2-analyst"}]}