CSSP Analyst, Journeyman

FEDITC, LLC; Indianapolis (IN); On-site; USD 110,000 - 150,000; Full time

Job summary

FEDITC, LLC is seeking a Journeyman CSSP Analyst to provide continuous cybersecurity monitoring, threat analysis, and incident response support for the DFAS CCE. This on-site role requires a United States Citizenship and an active Top-Secret clearance.

You will monitor events with SIEM tools, perform triage, analyze phishing, draft summaries, and support DFAS CSIRP documentation and incident response procedures across classified and unclassified networks.

Qualifications

• 5+ years cybersecurity/SOC analyst experience.
• Security+ certification.
• Experience with SIEM tools (Azure Sentinel, ArcSight, Splunk).
• Knowledge of phishing analysis and email security.
• Incident triage and classification experience.
• Understanding of network security monitoring.
• Familiarity with DFAS CSIRP or similar incident response procedures.
• Experience with ticketing systems for incident tracking.

Responsibilities

• Provide 24/7 security monitoring and analysis for DFAS CCE (ON-SITE REQUIRED).
• Monitor security events using Azure Sentinel, ArcSight, and other SIEM tools.
• Perform initial triage and classification of security incidents.
• Analyze phishing and spam emails, reviewing headers, attachments, and URLs for malicious indicators.
• Validate and classify incidents, determining true positives and escalating when required.
• Draft incident summaries and analyst reports for leadership and case records.
• Keep investigation notes and case records updated.
• Support protocol monitoring achieving 100% documentation per DFAS CSIRP.
• Participate in threat hunting activities under senior guidance.
• Operate CSSP toolsets for unclassified and classified enclaves.

Skills

SOC experience

Security+ certification

SIEM tools

Phishing analysis

Incident triage

Network monitoring

CSIRP familiarity

Ticketing systems

Education

Bachelor's degree in CS/Engineering/IT

Tools

Azure Sentinel

ArcSight

Splunk

Job description

FEDITC, LLC is a fast-growing business supporting DoD and other intelligence agencies worldwide. FEDITC develops mission critical national security systems throughout the world directly supporting the Warfighter, DoD Leadership, & the country. We are proud & honored to provide these services.

Overview of position:

FEDITC is seeking a CSSP Analyst, Journeyman provide continuous cybersecurity monitoring, threat analysis, and incident response support for the DFAS Common Computing Environment (CCE). This position is responsible for monitoring security events, investigating potential threats, analyzing phishing attempts, and performing initial incident triage and classification. The role also supports threat hunting, incident reporting, and security documentation across classified and unclassified networks to ensure compliance with DoD cybersecurity requirements and DFAS incident response procedures.

A United States Citizenship and an active Top-Secret DoD Security Clearance is required to be considered for this position.

Responsibilities

• Provide 24/7 security monitoring and analysis for DFAS CCE (ON-SITE REQUIRED)
• Monitor security events using Azure Sentinel, ArcSight, and other SIEM tools
• Perform initial triage and classification of security incidents
• Analyze phishing and spam emails, reviewing headers, attachments, and URLs for malicious indicators
• Validate and classify incidents, determining true positives and escalating when required
• Draft incident summaries and analyst reports for leadership and case records
• Keep investigation notes and case records updated
• Support protocol monitoring achieving 100% documentation per DFAS CSIRP
• Participate in threat hunting activities under senior guidance
• Operate CSSP toolsets for unclassified and classified enclaves

Experience/Skills:

• 5+ years cybersecurity/SOC analyst experience
• Security+ certification
• Experience with SIEM tools (Azure Sentinel, ArcSight, Splunk)
• Knowledge of phishing analysis and email security
• Incident triage and classification experience
• Understanding of network security monitoring
• Familiarity with DFAS CSIRP or similar incident response procedures
• Experience with ticketing systems for incident tracking

Preferred Qualifications:

• CySA+ certification (upgrade path)
• Experience with DFAS CSSP operations
• Threat hunting experience
• Experience with classified network monitoring

Education:

• Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related field

Certifications:

• Cyber Defensive Analyst (Intermediate) Playlist
• CompTIA Security+

Clearance:

• Active Top-Secret clearance is required.
• Must be a United States Citizen and pass a background check.
• Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).

FEDITC, LLC. is committed to fostering an inclusive workplace and provides equal employment opportunities (EEO) to all employees and applicants for employment. We do not employ AI tools in our decision-making processes. Regardless of race, color, religion, sex (including pregnancy), sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran, FEDITC, LLC. ensures that all employment decisions are made in accordance with applicable federal, state, and local laws. Our commitment to non-discrimination in employment extends to every location in which our company operates.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in Federal IT Consulting (FEDITC)’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A \"disabled veteran\" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A \"recently separated veteran\" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An \"active duty wartime or campaign badge veteran\" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An \"Armed forces service medal veteran\" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.