Defensive Security Analyst-Washington, DC
At its midpoint, $135k/yr, this role pays less than the $177k/yr midpoint for Security Operations & Incident Response openings today (usual band $145k–$314k/yr).
The full posting
SpecterOps is looking for candidates to support Security Operations at a SpecterOps customer site working directly with client personnel and systems. Candidates will independently support the client engineering, managing, and monitoring Security Operations Center (SOC) systems. A successful candidate will have excellent technical skills focused in the security operations space, impeccable soft skills, and be a well-organized, self-directed individual with familiarity working for a service-based information security organization.
Salary Range: $110,000-$160,000 base salary annually, commensurate with experience.
Requirements
- Current TS/SCI Clearance or eligible for Sensitive Compartmented Information designation
- Have the following operating hours: Monday through Friday, 9AM - 6PM US Eastern Time on site at Washington DC location. Be available for after-hours or weekend work in urgent incident response scenarios
- Provide expertise in a supporting capacity for incident response activities and digital forensics state preservation, including the capture and preservation of system logs, volatile memory captures, and hard drive (physical or virtual) image captures
- Established experience in operating in SOC environment, either through relevant experience or qualifications, is required
- Knowledge of operating and maintaining a SIEM
- Knowledge of cloud architectures, particularly AWS or Azure
- Experience with programming or scripting languages such as PowerShell, Python, and Bash
- Conduct host forensics, network, forensics, log analysis, and malware triage in support of hunt operations
- Interface with client contact(s) and staff in a constructive and professional manner
- Utilize common forensic and incident response tools
- Develop comprehensive and accurate reports and presentations for both technical and executive audiences
Nice to haves
- Experience in penetration testing
- Ability to quickly learn new technologies and have an ongoing desire to stay current with the latest technologies
- Ability to train others on the use of forensic and incident response techniques and tools
What We Offer
- Health/Dental/Vision/life insurance: 100% covered for both the employee and their family
- Flexible time off policy
- 13 paid holidays annually
- 401(k) with up to 4% company match
- Stock Options & bonuses
- Remote work: $1,500 new hire allowance to set up home office
- $500 annual home office allowance after first year
- $150 monthly cell phone and internet reimbursement
- $5,000 annual professional development allowance
- $5,250 towards continuing education or student loan repayment
- $1,200 annual budget for lifestyle, wellness, pet insurance and more
- A one-time $10,000 benefit towards family planning
- In person and virtual employee events throughout the year
- And of course, company swag!
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. To request reasonable accommodations, please contact us at careers@specterops.io
Unsolicited resumes are not accepted
#LI-REMOTE
Text as SpecterOps published it; last compared with the original on 11 Nov 2026.
The application
Your details and CV, then 5 questions (2 written).
- 1.Do you have a security clearance?Yes or no
- 2.What is your current security clearance level?Written answer
- 3.If applicable, please include some examples of your involvement with the information security community:Written answer · optional
- 4.Are you currently authorized to work in the United States without visa sponsorship?Yes or no
- 5.Are you willing to relocate to the DC Metro area?Yes or no
Taken from SpecterOps's application form as it stood on 11 Nov 2026.
The employer: SpecterOps
SpecterOps runs red team and adversary simulation services and makes BloodHound; this analyst works defensive engagements for clients.
Pay and benefits: A hybrid consulting role in Washington, DC.
Let security teams come to you
Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.
Hear first when SpecterOps posts a security role
We read SpecterOps's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.