Mid Cyber Defense Analyst MDX - SSFB​/HSV

Position Title:
Mid Cyber Defense Analyst

Location: Schriever Space Force Base, Colorado Springs, CO or Redstone Arsenal, Huntsville, AL

Relocation Assistance: None available at this time

Remote/Telework: NO - Not available for this position

Clearance Type: DoW Secret

Shift: Rotating Shifts

Travel Required: Up to 10% of the time

Description of Duties:

• Perform Defensive Cyber Operations (DCO)/Cyber Security Service Provider (CSSP) duties outlined in Evaluator Scoring Metrics (ESM).
• Perform cybersecurity duties on customer networks (proactively and reactively) to improve enterprise-wide security posture.
• Perform preliminary analysis, identification, and response actions to detect, characterize, and respond to cyber incidents IAW CJCSM 6510.01B.
• Lead event/incident investigations from start to conclusion, to include gathering data, analysis, and reporting.
• Properly document all steps in the incident response process while taking care to preserve and protect incident artifacts, evidence, and chain of custody.
• Analyze correlated asset, threat, and vulnerability data against known adversary exploits and techniques to determine impact and improve network defensive posture.
• Support a Cyber Defense Analyst and Cyber Defense Incident Responder training plan by instructing, evaluating, and mentoring Junior Cyber Defense Analyst and Cyber Defense Incident Responders.
• Support the development, establishment, review and update of DCO procedures, processes, manuals, and other documentation.
• Leverage actionable Cyber Threat Intelligence data to search for indicators of compromise and develop SIEM content/signatures to detect known attack patterns and make recommendations for improvements.
• Coordinate with CSSP-CERT subscribers to develop current configurations, rules, and signatures for cyber security related toolsets.
• Coordinate with CSSP-CERT subscribers to notify, investigate, and remediate discrepancies in security logging and CSSP-CERT alignment.
• Provide standardized and targeted training in support of CSSP-CERT subscriber cyber defense and incident response programs.
• Review data of ongoing intrusions or cybersecurity incidents and report, analyze, and document/report the findings in accordance with CJCSM 6510.01B guidelines.
• Provide support to internal and external Insider threat and law enforcement / counterintelligence (LE/CI) agencies during cyber incidents / investigations.

The successful candidate will:

• Have experience with most MS Office applications (Word, Excel, PowerPoint, and Visio).
• Be able to multi-task and prioritize various projects and assignments in a dynamic work environment in order to meet scheduled/unscheduled customer requests.
• Be willing to travel 25% of the time.
• Be willing to work rotating shifts in a 24x7x365 operational environment and respond quickly to emergencies as needed.

Basic Requirements:

• Must have 2, or more, years of general (full-time) work experience
• • May be reduced with completion of advanced education
• Must have 4 years of directly related experience in information security, physical security, or cybersecurity, or a combination thereof
• Must have 1, or more, years of experience working in a management or leadership role
• Must possess one of the following certifications:
  • FITSP-O | Federal IT Security Institute
  • CEH(P) | EC-Council
  • GMON | SANS
  • GRID | SANS
  • GCED | SANS
  • GDSA | SANS
  • GSEC | SANS
  • Pen Test+ | CompTIA
  • CySA+ | CompTIA
  • Cloud+ | CompTIA
• Must have an active DoW Secret Security Clearance
• Must be able to obtain/maintain an active DoW Top Secret Security Clearance

Desired Requirements:

• Have an Bachelor's degree, or higher, in Cybersecurity, Computer Science or related field
• Have experience with security analysis and solutions in a WAN/LAN environment to include Routers, Switches, Network Devices, and…