Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 6 days ago

Cyber Intel Analyst / Penetration Tester

ENSCO, Inc.33 open roles

Pay
$85,000 – $115,000 a year
Where
Colorado Springs, Colorado, United States
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowCyber Intel Analyst / Penetration TesterENSCO, Inc. · Colorado Springs, Colorado, United States

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on ENSCO, Inc.'s own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. ENSCO, Inc. postings stay open a median of 42 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 57.8%60 days
This job: posted 6 days ago

ENSCO, Inc. median: 42 days open

The posting

For more than 50 years, ENSCO has been providing leading-edge engineering, science and advanced technology solutions to governments and private industries worldwide.

ENSCO prides itself in creating and applying advanced technologies for mission success. We provide systems engineering, integration, and advanced technology services to transform the future safety, security, and resiliency of critical missions on the ground, in the air, in space, and in the information systems that connect these domains.

Learn more about ENSCO.

Position Description

ENSCO, Inc. is seeking an on-site Cyber Intel Analyst / Penetration Tester to support Defensive Cyberspace Operations for Space (DCO-S) capabilities protecting critical U.S. Space Force mission systems.

The Cyber Detection Engineer will evaluate whether cybersecurity sensors, data pipelines, and analytic platforms provide sufficient visibility into adversary activity. The position analyzes endpoint, network, system, and security-event telemetry; maps observable activity to adversary tactics, techniques, and procedures (TTPs); and develops threat-informed products that communicate detection coverage and operational risk.

The successful candidate will collaborate across cybersecurity operations, threat analysis, systems administration, data engineering, and mission-system organizations to translate complex technical findings into actionable guidance.

This position is on-site in Colorado Springs, Colorado.

Responsibilities

  • Analyze endpoint, network, system, and security-event telemetry to identify detection opportunities and visibility gaps within DCO-S platforms.
  • Map mission-relevant threats, telemetry, and detections to MITRE ATT&CK.
  • Develop and maintain ATT&CK Navigator layers, detection-coverage heatmaps, and related threat-informed visualizations.
  • Assess adversary TTP coverage and classify techniques as fully covered, partially covered, unobserved, or unassessed.
  • Develop, test, document, tune, and automate detection logic, queries, scripts, and repeatable analytical processes.
  • Evaluate and validate security data from sensor collection through parsing, normalization, enrichment, ingestion, indexing, storage, search, and visualization.
  • Translate findings into operator guidance, including recommended searches, analytical methods, and relevant data sources.
  • Support purple-team and threat-emulation activities by determining whether simulated adversary actions produce the expected telemetry and detections.
  • Document detection gaps, mission risks, and corrective actions for technical and leadership audiences.
  • Collaborate with cyber operators, intelligence analysts, system administrators, network engineers, quality-control personnel, and mission stakeholders to improve detection methodologies and test procedures.
  • Travel up to 10% to CONUS and OCONUS locations at the direction of the government customer.

Qualifications Required:

  • Bachelor’s degree in cybersecurity, computer science, information technology, engineering, data science, or a related field, plus three or more years of relevant experience. Equivalent education, military training, certifications, and professional experience will be considered.
  • Experience in detection engineering, threat hunting, incident response, network defense, security analytics, or SOC operations. Qualifying SOC experience must include functions such as hands-on investigation, SIEM querying, detection tuning, threat hunting, telemetry analysis, or log-source validation.
  • Experience applying MITRE ATT&CK to adversary TTPs, telemetry, detection logic, and coverage-gap analysis.
  • Experience analyzing endpoint, network, system, or security-event data using SIEM, EDR, network-security-monitoring, or comparable analytics platforms.
  • Ability to develop and refine detection logic, queries, scripts, visualizations, and repeatable analytical processes.
  • Ability to evaluate whether security data is properly collected, parsed, normalized, enriched, indexed, searchable, and available to cyber operators.
  • Strong analytical, problem-solving, organizational, communication, and collaboration skills.
  • Ability to document and present complex technical findings to operator, engineering, mission, and leadership audiences.
  • Proficiency with Microsoft Word, Excel, and PowerPoint.
  • Must meet DoD 8140 qualification requirements for the assigned DCWF work role and proficiency level through an approved certification.
  • Active DoD Top Secret security clearance with SCI eligibility and U.S. citizenship required.

Qualifications Desired:

  • Experience supporting DoD, USSF, DCO-S, intelligence-community, or other mission-system environments.
  • Experience with ATT&CK Navigator, purple-team exercises, adversary emulation, detection-as-code, or Sigma.
  • Experience with Bash scripting.
  • Current Security+, CySA+, or other certification approved for the assigned DCWF work role and proficiency level.

Required Certifications: See Required Skills U.S. Citizenship Required: Yes Security Clearance Required: TS/SCI Employment Type: Regular Full-time Background Check Type: 7 Year Pre-Employment Drug Screen Required: None Position Contingent Upon Contract Award: No

Salary Range

$85,000—$115,000 USD

REAL ID Requirement

This position may require the ability to access to U.S. federal facilities. In accordance with the Department of Homeland Security’s enforcement of the REAL ID Act, as of May 7, 2025, individuals must present a REAL ID-compliant form of identification or an acceptable alternative to gain entry. For a list of acceptable forms of identification, please click here.

Benefits

At ENSCO, a positive working environment and a competitive salary are only part of the reason for choosing a career here. We offer a comprehensive benefits package that creates a stimulating and supportive environment where you can thrive - visit ensco.com/careers/benefits to learn more.

Export Control and Licensing

This position may involve access to technology or technical data that is controlled under U.S. export control laws and regulations and the release of which to a non US person may require an export license from the U.S. Government.

Privacy

Your data privacy is important to ENSCO. Please click here to view our privacy policy. California residents can click here to view your California privacy rights.

EEO Statement

ENSCO, Inc. and its wholly owned U.S. subsidiaries are Equal Opportunity Employers– veterans, disability

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against ENSCO, Inc.'s own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on ENSCO, Inc.'s form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    ENSCO, Inc.'s answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.