Offer summary

Qualifications:

Experience in a Cybersecurity Operations Center (SOC), with at least 1 year for junior roles or 5 years for senior roles., Proficiency with SIEM tools like Splunk or ELK, and EDR tools such as CrowdStrike or SentinelOne., Knowledge of cyber threat hunting, threat intelligence, and security incident investigation., Strong analytical and communication skills, with preferred certifications like Security+, CEH, GCIH, or CISSP..

Key responsibilities:

Monitor and analyze network and system activity for security threats.

Perform proactive cyber threat hunting and investigate alerts using SIEMs and forensic tools.

Write and review daily threat reports and assessments, collaborating with enterprise cyber teams.

Senior leads provide mentorship, incident triage, and coordinate reporting and escalation workflows.

Job description

Description

Dragonfli Group LLC is a Washington, DC-based consulting firm specializing in cybersecurity and IT services. We support both government agencies and large commercial enterprises, delivering expertise across cyber defense, threat intelligence, and security operations.

Dragonfli Group LLC is seeking skilled Cyber Security Analysts to provide cybersecurity monitoring and threat analysis for a large enterprise in a highly regulated industry. This role requires prior experience in a Cybersecurity Operations Center (SOC), demonstrated cyber threat hunting, and strong skills in identifying and mitigating security threats.

This is a full-time, on-site position based in San Antonio, Texas, supporting weekday coverage on standard business hours (Monday–Friday, 8-hour shifts). We are hiring across levels—Junior Analysts to Senior Leads—to build a capable and responsive cyber defense team.

Responsibilities:

Monitor and analyze network/system activity for threats
Perform proactive cyber threat hunting
Investigate alerts via SIEMs, EDR, and traffic/log analysis
Maintain and contribute to a centralized threat intelligence picture
Write and review daily summary reports and threat assessments
Collaborate with cyber teams across the enterprise
Optimize detection tools to improve signal-to-noise ratios

Senior Leads will also:

Provide mentorship and technical oversight to junior staff
Lead shift-based incident triage and prioritization
Coordinate reporting, analysis, and escalation workflows

Requirements

SOC experience (1+ years for junior / 5+ years for senior)
Hands-on with SIEM (Splunk, ELK), EDR (CrowdStrike, SentinelOne), and forensic tools
Familiar with MITRE ATT&CK
Strong analytical and written communication skills
Preferred: Experience in highly regulated industries (e.g., healthcare, energy, finance)
Preferred: Security+, CEH, GCIH, CISSP