Action Officer

Sentar Inc.; Charleston (AR); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Voluntary Medical, Dental, Vision with

Health Savings or Flexible Spending

401(k) match

Generous PTO

Tuition reimbursement

Professional development reimbursement

Mental health programs

Recognition and awards programs

Other leave programs; holidays, bereav

Job summary

Sentar Inc. is seeking an Action Officer in Charleston, SC to support the DHA through proactive cybersecurity operations and RFI responses. You will analyze threats, coordinate with cross-functional teams, and deliver actionable intelligence to safeguard DoD health IT systems and mission readiness.

The role requires TS/SCI clearance, DoD policy familiarity, and a track record in cyber threat intelligence. You will work in a fast-paced, interagency environment supporting warfighters and DoD

Qualifications

• 5+ years in cybersecurity or threat intel, supporting DoD or federal agencies.
• Strong DoD cybersecurity policies knowledge (RMF, 8500-series).
• Experience analyzing cyber threats and producing intelligence reports.
• Experience with MITRE ATT&CK, TI platforms, and SIEMs.
• Proven written and verbal communication for varied audiences.

Responsibilities

• Receive, triage, and respond to RFIs from DHA subscribers.
• Perform threat analysis on cyber incidents and adversary activity.
• Deliver concise, actionable intelligence reports tailored to subscribers.
• Collaborate with CyOC analysts, responders, and threat teams.
• Maintain situational awareness of current threats and tactics.
• Develop and refine RFI workflows and SOPs.
• Provide guidance on threat mitigation and security best practices.
• Track RFI status, metrics, and trends for reporting.
• Coordinate with NIWC Atlantic and DHA stakeholders for alignment.
• Operate in a high-tempo environment with shifting priorities.

Skills

Threat intelligence analysis

Cybersecurity

DoD policy knowledge

RMF / DoD 8500-series

MITRE ATT&CK framework

Incident response

Threat research

Communication skills

RFIs management

Tools

JIRA

Confluence

MS Teams

SharePoint

Job description

Sentar is proud to be an employee-owned company, fostering a culture of empowerment, collaboration, and innovation. Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the team where you can build, innovate, and secure your career.

Sentar is seeking an Action Officer in Charleston, SC!

The Cyber Operations Center (CyOC) Action Officer will support the mission-critical efforts of the Defense Health Agency (DHA) by enabling proactive cybersecurity operations that protect sensitive healthcare systems across the Department of Defense (DoD). This role is embedded within the Naval Information Warfare Center (NIWC) Atlantic's Defensive Cyberspace Operations (DCO) Integrated Product Team (IPT), which is tasked with safeguarding DHA’s global infrastructure against cyber threats, unauthorized access, and emerging vulnerabilities.

As part of the CyOC team, the Action Officer serves as a key operational resource, working directly with DHA subscribers to receive, triage, and respond to Requests for Information (RFIs) related to cybersecurity threats and incidents. This includes performing detailed threat analysis, coordinating with cross-functional intelligence teams, and delivering actionable intelligence reports to bolster the defense posture of supported entities.

Analysts in this role serve on the front lines of cyber defense, translating raw threat data and subscriber inquiries into strategic insights. By supporting frontline military medical operations and critical DoD health IT systems, the RFI Analyst plays a direct role in ensuring mission continuity, data protection, and the safety of warfighters and beneficiaries alike.

This position requires a Top Secret/SCI clearance, strong knowledge of DoD cyber policy, and a proven ability to analyze and communicate complex threat intelligence. Candidates will be part of a dynamic, fast-paced environment where analytical precision, rapid response, and interagency collaboration are essential to mission success.

Role Description

The CyOC Action Officer will support the Defensive Cyberspace Operations mission by delivering actionable intelligence and analytical support to DHA stakeholders. Specific responsibilities include:

• Receive, assess, and triage incoming Requests for Information (RFIs) from DHA subscribers.
• Conduct detailed research and threat analysis on cyber incidents, indicators, and adversary activity.
• Develop and deliver concise, accurate, and actionable intelligence reports tailored to subscriber needs.
• Collaborate with internal CyOC analysts, incident responders, and threat intelligence teams to ensure comprehensive RFI responses.
• Maintain situational awareness of current and emerging cyber threats, vulnerabilities, and attack techniques.
• Support the development, documentation, and refinement of RFI processing workflows and standard operating procedures (SOPs).
• Provide technical guidance to subscribers regarding cyber threat mitigation and security best practices.
• Track RFI status, metrics, and trends to support operational reporting and performance improvement.
• Coordinate with NIWC Atlantic and DHA stakeholders to ensure mission alignment and timely response to critical intelligence needs.
• Operate in a high-tempo environment with competing priorities and rapidly evolving threat landscapes.

Qualifications

Clearance Level: TS/SCI required

Certifications: Candidate must meet DoD 8140 (Formerly 8570) baseline certification at the time of hire. The following are commonly accepted: Security+, CISM, or CISSP

Experience:

• 5+ years of experience in cybersecurity, threat intelligence analysis, or related cyber defense roles supporting DoD or federal agencies
• Strong understanding of DoD cybersecurity policies, including DoD 8500-series, DoDI 8510.01 (RMF), and CJCSM 6510.01 (Cyber Incident Handling)
• 5+ years of experience conducting cyber threat research, analysis, and reporting in support of SOC, IR, or cyber threat intel teams
• Proficiency in analyzing cyber threats across the MITRE ATT&CK framework, including TTPs and IOCs
• Experience with threat intelligence platforms (TIPs), SIEM tools (e.g., Splunk, ELK, QRadar), and open-source intelligence (OSINT) research tools
• Familiarity with malware analysis, DDoS patterns, phishing campaign forensics, and adversarial behavior
• Strong written and verbal communication skills, including the ability to draft and present technical intelligence reports to varied audience.
• Ability to manage and prioritize multiple concurrent RFIs in a high-tempo operations environment
• Working knowledge of network architecture and protocols, including TCP/IP, DNS, HTTP/S, SMTP, and common intrusion methods
• Hands‑on experience with collaboration and tracking tools such as JIRA, Confluence, MS Teams, and SharePoint
• Demonstrated ability to work collaboratively in a cross-functional environment under minimal supervision

Benefits at Sentar

Our unique ownership model attracts top talent, giving employees the freedom to take initiative and drive meaningful improvements. In addition to cultivating a thriving and inclusive work environment, Sentar offers an extensive benefits package designed to support the well‑being of employees and their families. Employee ownership is the foundation of our culture, promoting participation, teamwork, and accountability while ensuring long‑term financial security and a commitment to excellence.

• Voluntary Medical, Dental, Vision, with Health Savings or Flexible Spending Plan options
• Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options
• Group Term Life, Short‑Term and Long‑Term Disability is provided by Sentar to all qualifying employees
• Generous 401(k) match
• Competitive PTO plan that graduates quickly with years of service
• Other leave programs; holiday schedule along with bereavement, maternity, jury and military duty
• Mental health awareness programs
• Tuition reimbursement
• Professional development reimbursement
• Recognition and Awards programs

Sentar is an affirmative action and equal opportunity employer M/F/Vets/Persons with Disabilities

Sentar is proudly an Equal Opportunity and VEVRAA Federal Contractor Employer M/F/Vets/Persons with Disabilities. Follow these links to learn more about your rights: EEO Is the Law Poster; EEO Is Law Supplement; and Pay Transparency.

We want you to build your career at Sentar, so if you are an individual with a disability and require a reasonable workplace accommodation applying for a job or at any point in the employment process, contact the Recruiting Manager at [e-mail]. Please indicate the specifics of the assistance needed. Thank you for considering Sentar in your employment search.

Build, Innovate, Secure Your Career at Sentar.