Defensive Cyber Analyst - Temporary with Security Clearance

Responsibilities

• Analyze cyber incidents, correlate incident details and formulate response actions.
• Provide recommendations on tuning and maximizing capability of existing tools, while providing recommendations for other tools to increase capability.
• Monitor government provided DCO tools and systems.
• Conduct after action processes to capture efforts taken to mitigate unauthorized actions.
• Participate in development of DCO Tactics, Techniques and Procedures (TTPs).
• Participate in development of DCO concept of operations, processes and procedures.
• Identify security discrepancies and report security incidents.
• Provide expert research and analysis in support of expanding programs and area of responsibility.

Qualifications Required

• Minimum of one (1) active DoD 8570.07-M Cyber Security Services Provider (CSSP) "Analyst" or "Incident Responder" certifications:
• CEH, CySA+, GCIH, GCIA, GCED, GFACT, GISF, CFR, CCNA Cyber Ops, CCNA-Security, GICSP, Cloud+, SCYBER, PenTest+, CHFI, GCFA OR
• BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science OR
• Appropriate Military IT/cyber training (M03385G; M10395B; M223854 or A-150-1980 or A-150-1202 or A-150-1203 or A-150-1250 or A-531-0451 or A-531-4421 or A-531-1900 or WSS 011 or DISA-US1377)
• 1-3 years of Cybersecurity/IT experience
• Experience performing Continuous Cybersecurity Monitoring, Intrusion Detection and Cyber Incident Response.
• Cybersecurity Service Provider (CSSP) experience is preferred.
• Familiarity with Space Operations is highly desired.
• Experience with the following tools:
• Elastic Stack, Kibana, Suricata, Splunk, Snort, Wireshark, Bro/Zeek logs, tcpdump, editcap, ACAS, Microsoft Office 365, Python or Bash scripting.

Clearance

• Active DoD TS/SCI clearance

• Schriever Space Force Base (SFB), CO

• Night Shift 645p-645a MT, either Sun-Tues, or Thurs-Sat, and every other Wed.