Cyber Defense Analyst — DoD CSSP & Incident Response

Amentum; Huntsville (AL); On-site; USD 119,000 - 130,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Educational reimbursement

Parental leave

Employee stock purchase plan

Disability and life insurance

Pet insurance

Job summary

Amentum is seeking a Mid Cyber Defense Analyst to support DoD network defense at Schriever AFB or Redstone Arsenal. The role requires DoW Secret clearance, 24x7 operations, and up to 10% travel.

You will lead incident investigations, develop CSIRT content, and mentor junior analysts in a fast-paced environment. Responsibilities include DCO duties, completeness in documentation, and collaboration with CSSP-CERT to maintain secure configurations.

Qualifications

• Must have 4 years of directly related experience in information security, physical security, or cybersecurity.
• Must have 1+ years in a leadership or management role.
• Active DoW Secret clearance; ability to obtain DoW Top Secret clearance.

Responsibilities

• Perform Defensive Cyber Operations (DCO) duties per ESM.
• Lead incident investigations from start to finish and document in chain of custody.
• Coordinate with CSSP-CERT to update configurations, rules, and signatures.
• Develop SIEM content/signatures to detect attack patterns.

Skills

Incident response

DCO experience

Training/mentoring

Documentation

Cybersecurity

Education

Bachelor's degree in Cybersecurity/CS

Tools

SIEM

Firewalls

Nessus/ACAS

Windows/Linux

Job description

Amentum is seeking a Mid Cyber Defense Analyst to support DoD network defense at Schriever AFB or Redstone Arsenal. The role requires DoW Secret clearance, 24x7 operations, and up to 10% travel.

You will lead incident investigations, develop CSIRT content, and mentor junior analysts in a fast-paced environment. Responsibilities include DCO duties, completeness in documentation, and collaboration with CSSP-CERT to maintain secure configurations.