Cyber Defense Operations Specialist (TS/SCI)

SMS Data Products Group, Inc.; San Antonio (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

SMS Data Products Group, Inc. is seeking a Cyber Defense Operator to support AFCERT mission with near real-time network security monitoring, IDS/IPS analysis, and host security monitoring across the AF Information Network.

The role requires DoD TS/SCI clearance, GCFA certification within 120 days, and experience in DoD/IC environments. You will work 24x7 on rotating shifts and contribute to incident triage, reporting, and knowledge transfer.

Qualifications

• Minimum of five years in cyber defense operations or related DoD/IC work.
• First line of defense for DoD networks requiring TS/SCI clearance.
• GCFA certification or 120 days to obtain after hire.
• Knowledge of Cyber Kill Chain, MITRE ATT&CK, and NIST 800-series.
• Basic understanding of CPU, storage, networking, TCP/IP and OSI models.
• Self-motivated and able to perform with minimal supervision.

Responsibilities

• Conduct near real-time network security monitoring and intrusion detection analysis across networks and systems.
• Review IDS/IPS alerts per Operating Instruction (OI) and checklists.
• Monitor host security, alert review, intrusion detection analysis, and event analysis.
• Develop, review and maintain procedures for monitoring Hosts/Systems.
• Analyze logs to identify intrusions and remediate in collaboration with DoD resources.
• Record activity in CMS to enable investigations and handoffs.
• Enter event data into mission support systems per procedures.
• Escalate security incidents using established policies and procedures.
• Generate end of mission reports (MISREPS) and provide knowledge transfer for future crews.

Skills

Cyber defense operations

Network security monitoring

Intrusion detection analysis

Self-motivated

DoD environment familiarity

Education

High School Diploma or GED

Tools

SIEM

EDR

IDS/IPS

Case management systems

Job description

SMS Data Products Group, Inc. is seeking a Cyber Defense Operator to support AFCERT mission with near real-time network security monitoring, IDS/IPS analysis, and host security monitoring across the AF Information Network.

The role requires DoD TS/SCI clearance, GCFA certification within 120 days, and experience in DoD/IC environments. You will work 24x7 on rotating shifts and contribute to incident triage, reporting, and knowledge transfer.