Senior Cyber Security Operator - Top Secret Clearance; SCI Eligible

Join to apply for the Senior Cyber Security Operator - Top Secret Clearance (SCI Eligible) role at JFL CONSULTING, LLC

1 day ago Be among the first 25 applicants

Join to apply for the Senior Cyber Security Operator - Top Secret Clearance (SCI Eligible) role at JFL CONSULTING, LLC

Description

Description

Job Title: Senior Cyber Security Operator

Place of Performance: Cheyenne, WY

Mandatory Requirements: Top Secret Clearance (SCI Eligible)

Experience Level: Senior-Level (8+ years in cybersecurity, 3+ years in passive vulnerability analysis)

Responsibilities

• Ensure the safe and proper functional operation of the toolkit and its components.
• Collect and document measures of performance per approved CONOPS.
• Analyze and document behaviors, characteristics, and attributes of a network’s baseline activity within steady-state operations.
• Analyze and investigate potential anomalies or outliers from established baseline.
• Analyze and identify misconfigurations, faults, and vulnerabilities within the network’s architecture, subcomponents, and utilized communication protocols.
• Determine root source of anomalies and extent of vulnerable findings for validation with system users and administrators.
• Document and report anomalies to appropriate channels for further investigation and notification.
• Document vulnerable findings and provide recommendations through appropriate channels that increase both security and operational capacity of the respective network.
• Recommend improvements to current operations for potential incorporation into the overall program.
• Collaborate with cross-functional teams to support incident response, system hardening, and policy development as needed.
• Additional duties as assigned
• 5-10% Conus Travel

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related field preferred. Equivalent work experience may be considered in lieu of a degree.
• A master's degree is a plus.

• Must hold an IAT Level II certification as defined and described in DoDD 8570.01, 8570.01-M, and 8140.01–03, and as amended. (e.g., Security+ CE, CySA+, CCNA Security, GSEC).
• Must hold a CSSP Analyst certification as defined and described in DoDD 8570.01, 8570.01-M, and 8140.01–03, and as amended. (e.g., CEH, CySA+, GCIA, GCIH).
• Preferred:
  Advanced certifications such as CISSP (Certified Information Systems Security Professional), OSCP (Offensive Security Certified Professional), or similar.

• Minimum 5 years in cybersecurity operations or analysis
• Minimum 2 years of experience with passive vulnerability detection techniques
• Experience supporting DoD or Intelligence Community networks

• Practical experience with firewalls, network TAPs, IDS/IPS, endpoint protection, and other network defense technologies
• Adept in evaluating network protocols utilizing network analyzers, such as Wireshark, Tshark, and tcpdump
• Experienced in analyzing network datasets, including Zeek and firewall logs, to support threat hunting and security investigations.
• Experienced in leveraging data analysis platforms, such as Splunk, Kibana, and Arkime, to detect and analyze anomalous network activity
• Proficient in triaging Suricata alerts, tuning rules, and creating custom detections.

• In-depth understanding of network vulnerabilities and misconfigurations
• Strong knowledge of cybersecurity principles, adversary techniques, and detection/response strategies
• Experience working within the framework of a CONOPS or similar operational document
• Awareness of DoD cybersecurity frameworks (e.g., RMF, CMMC, NIST 800-53) and their application in secure system design and monitoring.
• Knowledge of common enterprise network architectures and defense mechanisms
• Experienced in analyzing TCP/IP, DNS, HTTP/S, SSL/TLS, SMB, and RDP protocols to identify vulnerabilities, misconfigurations, and indicators of malicious activity.

• Strong analytical and investigative mindset
• Excellent documentation and reporting skills
• Effective communicator with ability to explain technical…