Abile Group, Inc. · St. Louis, MO

Salary
Posted
Jun 29, 2026
Location
St. Louis, MO
Last confirmed open
Jul 21, 2026

What this job asks for AI summary

This role centers on monitoring and analyzing network traffic patterns to detect, predict, and investigate cybersecurity incidents for an Intelligence Community customer. Day-to-day work involves developing and tuning detection rules, signatures, and scripts; collaborating with incident response and data analytics teams; and correlating threat indicators across enterprise systems. It suits an experienced cyber analyst holding a TS/SCI clearance with a strong background in SIEM querying, network protocol analysis, and signature development.

Senior level · 8+ years · National · Bachelor's required · TS/SCI clearance · Contract

Must have (3)
SIEMprotocol analyzersregular expressions
Nice to have (4)
hex editorPython, Shell Scripting or PowerShellPurple Teamcloud security

“or” means any one of them counts — you don't need all of them.

We read this from the posting text with AI. Skim the description below before ruling yourself out.

How this req sits in the market our data

What won't set you apart
SIEM55%

Most people in this occupation already list these. Still required — just not what gets you shortlisted.

What the occupation pays Median $132,021 (middle half $99,961–$167,095).

Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.

Why we read it this way (10)

Location is not specified in the posting beyond 'multiple locations worldwide'; the role supports an Intelligence Community customer and is almost certainly US-based given the TS/SCI requirement, but no specific metro or state is named.

Clearance gate is TS/SCI with the ability to obtain a CI Polygraph — the poly is not yet required but must be obtainable.

DoD 8140.01 / 8570.01-M IAT Level III and CSSP Analyst certifications are hard-required; captured as a single skill representing the certification gate rather than listing individual cert names (e.g., GCIA, GCIH, CCNP Security) since the JD specifies compliance level, not a specific cert.

Static file signature / 'magic numbers' knowledge is folded into the signature development skill, as the JD treats it as part of the same countermeasure-development competency.

Scripting (Python/Bash/PowerShell) and hex editor comfort appear under 'Desired Skills' and are marked preferred accordingly.

Data mining / SIEM query experience and signature tuning are listed under 'Required Skills' and are marked as hard gates.

No compensation figures are provided in the posting.

Ignored 3 non-technology phrase(s) as skills (responsibilities/concepts, not named tools): signature development, network protocol analysis, DoD 8570 IAT Level III.

Requires a TS/SCI clearance — the cleared population is a small fraction of this occupation, so the real candidate pool is materially smaller than the estimate below, which does not model clearance.

Posting is for a contract engagement — the market benchmarks below price full-time roles, so read the comp comparison with that in mind.

Read the full posting

The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.

Apply

Apply on employer site ↗