Cyber Security Analyst & Engineer (Multiple Openings) with Security Clearance

Cyber Intelligence Analyst
Clearance: TS/SCI
Salary: $97K
Major Duties & Responsibilities
Cyber Threat Analysis & Intelligence 1. Analyze cyber intelligence reports to determine correlation and applicability to network operations on AFCENT networks. 2. Analyze network intrusion detection reports and vulnerability assessments to evaluate security posture as it pertains to current operations and information security levels. 3. Recommend security posture changes based on security analysis and changes in threat indicators. 4. Develop threat profiles to increase visibility of known bad actors and use that information to create signatures for detection. Security Monitoring & Incident Reporting 1. Track, document, and report all security-related events, including, but not limited to, Discharge of Classified Information and Cross Domain Violations IAW USCENTCOM/AFCENT policy. 2. Coordinate and track Information Assurance Vulnerability Alerts (IAVA). Compliance & Risk Management 1. Review and report AFCENT compliance to USCENTCOM, and develop Plans, Objectives, Actions and Milestones (POA&M) if unable to complete task. Training & Knowledge Transfer 1. Provide on-shift training to contractor and government personnel, including analysis interpretation and threat/event correlation. Network Operations Support 1. Provide LAN/WAN support. Qualifications
Education & Experience • 5+ years experience in cyber and network operations. • Bachelor’s degree in a related field. • Additional years of experience may be substituted for degree requirements. Required Certifications • Must be Security+ certified. • Must be Network+ certified. • Must be Linux+ or RHCSA certified. • Must hold the ITIL Foundations certification or be able to obtain the certification within 60 days of hire. Technical Requirements • Must have firewall and UNIX/Linux experience. • Experience performing analysis of security, auditing procedures, and backup systems to thwart adversary penetration. • Experience evaluating an adversary's network profile, including: ○ Physical location of assets ○ Architectures ○ Security policies ○ Baseline activity ○ Peculiarities and vulnerabilities ○ Capabilities • Able to assess information gaps and predict areas of information that enhance the collection cycle, based on collection strategies. • Experience establishing policy to ensure intelligence threat inputs and intelligence supportability requirements are considered and integrated into market research and other research and development efforts. Professional Skills • Able to communicate complex programmatic cybersecurity planning information and elicit understanding and support from professional peers and non-specialists. Clearance Requirement • Must be a U.S. Citizen. • Must hold a current Top Secret clearance with SCI access (TS/SCI). Cyber Security Analyst
Clearance: TS/SCI
Salary: $114K
Major Duties & Responsibilities
Cyber Threat Detection & Incident Analysis 1. Analyze network intrusion detection systems and conduct vulnerability assessments. 2. Develop methods to detect and prevent intrusive activities utilizing knowledge. 3. Assist in developing countermeasures to isolate, contain and prevent intrusive activities and secure systems. 4. Develop methods to identify, contain, log, and analyze intrusive activities and security vulnerabilities on AFCENT networks.
Security Monitoring & Cyber Defense Operations 1. Conduct network security monitoring and intrusion detection analysis using the AFCENT/USCENTCOM selected security tools to include but is not limited to IDS/IPS, firewall, proxy, router, Fidelis, Trellix, and LogRhythm logs. 2. Install, configure, maintain, and manage the AFCENT/USCENTCOM security devices to include but is not limited to IDS/IPS, ESS/HBSS, and forensic tools. 3. Analyze network firewall and computer network server (DNS, proxy, domain controller, file server, Active Directory) logs.
Automation & Scripting 1. Write and develop custom scripts as needed to perform tasks related to all Cybersecurity toolsets, such as custom parsers and responses.
Documentation & Process Development 1. Assist in development and documentation of sensor process and checklists.
Network Operations Support 1. Provide LAN/WAN support. Qualifications
Education & Experience • 5+ years experience in cyber security. • Bachelor’s degree in a related field. • Additional years of experience may be substituted for degree requirements.
Required Certifications • Must be CISSP certified. • Must be Network+ or CCNA certified. • Must hold the ITIL Foundations certification or be able to obtain the certification within 60 days of hire.
Technical Requirements • Must have firewall experience. • Experience with intrusion detection and vulnerability assessments. • Strong knowledge of Microsoft Windows technologies, including: ○ Active Directory ○ Windows Administration ○ Scripting ○ Windows configuration techniques • Linux experience to include: ○ Red Hat ○ Fedora • Networking experience including: ○ Routers ○ Switches ○ Firewalls • Experience with: ○ Cisco ○ Juniper • Experience working with security monitoring and analysis tools including: ○ IDS/IPS ○ ESS/HBSS ○ Fidelis ○ Trellix ○ LogRhythm ○ Forensic tools
Professional Skills • Must be detail oriented and possess the ability to work in a multi-disciplined environment with an adaptive personality. • Strong analytical and communication skills. • Must be a team player able to work professionally and collaboratively with the government customer and other contract members of the project team.
Availability & Travel Requirements • Must be able to provide support in a 24/7/365 environment, including occasionally covering shifts outside of the assigned shift and/or providing after-hours, weekend, or holiday support as needed on a rotational basis. • Must be able to travel to CONUS sites to provide TDY support.
Clearance Requirement • Must be a U.S. Citizen. • Must hold a current Top Secret clearance with SCI access (TS/SCI). Cyber Security Engineer
Clearance: Secret
Salary: $97K
Major Duties & Responsibilities
Security Tools Administration & Management 1. Install, configure, maintain, and manage the AFCENT/USCENTCOM security devices to include but is not limited to: ○ IDS/IPS ○ LogRhythm Enterprise Security Manager ○ ACAS ○ End-Point Security Systems (ESS)/Host-Based Security Systems (HBSS) ○ Associated Virtual Private Network (VPN) equipment/configurations 2. Maintain ESS/HBSS and all related DISA mandated point products. 3. Conduct network security monitoring and intrusion detection analysis using the AFCENT/USCENTCOM selected security tools, including but not limited to: ○ IDS/IPS ○ Firewalls ○ Proxy ○ Router ○ ESM ○ Logger ○ Fidelis ○ HBSS ○ LogRhythm logs
Cybersecurity Engineering & Incident Response 1. Develop methods to detect and prevent intrusive activities utilizing knowledge. 2. Assist in developing countermeasures to isolate, contain, and prevent intrusive activities and secure systems. 3. Maintain current knowledge on new vulnerabilities and exploits. 4. Develop system concepts of operations and engineering plans to execute security requirements for new and existing systems with a focus on incident response policies and procedures.
Network Security Operations 1. Provide technical advice and assistance to the AFCENT NOSC-Cybersecurity team to resolve network issues and perform actions necessary to ensure IDS/IPS sensors are collecting and reporting network activity. 2. Conduct troubleshooting and fault isolation to ensure network connectivity to the sensor equipment. 3. Build tactical and strategic network profiles of specific systems and complete network architecture. 4. Develop reports and trend analysis documentation on bandwidth, network architecture, and network security incidents.
End User Support & Compliance 1. Diagnose and resolve end-user problems. 2. Ensure end users adhere to proper security policies and procedures.
Documentation & Process Development 1. Assist in the development and documentation of sensor processes and checklists.
Network Operations Support 1. Provide LAN/WAN support. Qualifications
Education & Experience • 3+ years of cybersecurity experience. • Associate’s degree in a related field. • Additional years of experience may be substituted for degree requirements.
Required Certifications • Must be Security+ certified. • Must be Network+ or CCNA certified. • Must hold the ITIL Foundations certification or be able to obtain the certification within 60 days of hire.
Cybersecurity & Compliance Knowledge • Familiar with: ○ DIACAP ○ Risk Management Framework (RMF) ○ STIGs ○ IA Controls
Technical Requirements • Experience with development/architecture for applications and services, testing, and administration. • Strong knowledge of Microsoft Windows technologies, including: ○ Active Directory ○ Windows Administration ○ Scripting ○ Windows configuration techniques • Linux experience including: ○ Red Hat ○ Fedora • Networking experience including: ○ Routers ○ Switches ○ Web proxies ○ Firewalls • Experience with: ○ Cisco ○ Juniper ○ SIEM ○ IDS/IPS ○ EDR ○ ENS (Trellix) ○ ACAS
Professional Skills • Must be detail oriented and possess the ability to work in a multi-disciplined environment with an adaptive personality. • Strong analytical and communication skills. • Must be able to apply intensive and diverse knowledge to problems and make independent decisions. • Must be a team player able to work professionally and collaboratively with the government customer and other contract members of the project team.
Availability & Travel Requirements • Must be able to provide support in a 24/7/365 environment, including occasionally providing after-hours, weekend, or holiday support as needed on a rotational basis. • Must be able to travel to CONUS sites to provide TDY support.
Clearance Requirement • Must be a U.S. Citizen. • Must hold a current Secret clearance. Counter Access Analyst
Clearance: Secret
Salary: $101K
Major Duti