Cyber Defense Operations Analyst - Tier 1 (CSSP)

BreakPoint Labs LLC; Hawaii; On-site; USD 70,000 - 95,000; Full time

Job summary

BreakPoint Labs LLC seeks a Tier 1 Defensive Cyber Operations (DCO) Analyst to monitor and triage security events in a CSSP environment. Four ten-hour shifts are available (Sun-Wed or Wed-Sat).

Responsibilities include monitoring networks, identifying suspicious activity, escalating incidents, supporting initial incident response, and maintaining accurate reporting. You will also assist with log correlation using Splunk, Elastic, and Sentinel.

Qualifications

• 3+ years in CSSP, SOC, or similar environment or a Bachelor’s degree in a relevant field.
• DoD 8570 IAT Level II and CSSP-specific certifications required.
• Experience with log aggregation tools (Splunk, Elastic, Sentinel) preferred.
• Experience with IDS/IPS, host-based and OS logging solutions.
• Knowledge of Incident Response methodologies.
• Experience with digital forensics, threat hunting, and incident response.
• Familiarity with CJCSM 6510.01B.
• Analytical ability and strong verbal/written communication skills.

Responsibilities

• Monitor network and host-based systems.
• Identify and validate suspicious activities.
• Escalate security incidents as required.
• Provide support for foundational incident response procedures.
• Comply with reporting requirements with accuracy and timelines.
• Assist in documenting and tracking incident details.
• Participate in training to learn tools and processes.
• Support log correlation using Splunk, Elastic, and Sentinel.
• Assist in program reviews and product evaluations as directed.
• Surge support may be required for incident response actions.

Skills

CSSP/SOC experience

DoD 8570 IAT Level II

Incident response

Digital forensics / threat hunting

CJCSM 6510.01B familiarity

Analytical ability and communication

Education

Bachelor’s degree in a relevant technical field

Tools

Splunk

Elastic

Sentinel

Job description

BreakPoint Labs LLC seeks a Tier 1 Defensive Cyber Operations (DCO) Analyst to monitor and triage security events in a CSSP environment. Four ten-hour shifts are available (Sun-Wed or Wed-Sat).

Responsibilities include monitoring networks, identifying suspicious activity, escalating incidents, supporting initial incident response, and maintaining accurate reporting. You will also assist with log correlation using Splunk, Elastic, and Sentinel.