Cyber Defense Operator

Insight Global; San Antonio (TX); On-site; USD 100,000 - 115,000; Full time

Job summary

A staffing and recruiting company is seeking a TS/SCI Cyber Defense Operator to support a significant DoD Network. This full-time role involves 24/7 security monitoring, analyzing IDS/IPS alerts, and ensuring cybersecurity compliance. Candidates must have TS/SCI clearance and relevant certifications. The ideal applicant has 1-4 years of experience in Cyber Operations and is ready for an engaging support mission within the SCIF environment. Competitive pay range is between $100,000.00 and $115,000.00 annually.

Qualifications

• TS/SCI Clearance is mandatory.
• GIAC Certified Forensic Analyst or multiple SANS Certifications 5+.
• Experience working with DoD customers in Cyber Operations/Analysis (1-4 years required).
• Willingness to work a 24/7/365 support mission.

Responsibilities

• Review IDS/IPS alerts and conduct host security monitoring for the DoD Network.
• Analyze and report on host DCO events and suspicious activity.
• Monitor security sensors and correlate security issues/events.
• Conduct near real-time network security monitoring and intrusions detection.

Job description

Base pay range

$100,000.00/yr - $115,000.00/yr

JOB DESCRIPTION

Insight Global is seeking a TS/SCI Cyber Defense Operator to support and defend one of the largest DoD Networks. This is a 24/7/365 mission and will work on base and will sit within a Sensitive Compartmented Information Facility (SCIF).

Responsibilities

• Review all IDS/IPS alerts per DoD Customer Operating Instruction (OI) and checklists at the AOL, COOP, or Ops Floor. Conduct host security monitoring, alert review, and intrusion detection analysis for the DoD Network-SOC mission.
• Comply with 3rd party MOU/MOA monitoring and reporting requirements. Analyze host DCO events to determine the necessity for higher level analysis and conduct an initial assessment of type and extent of intruder activities.
• Monitor security sensors to analyze Intrusion Detection Systems (IDS) and Security Information and Event Management (SIEM) to identify and correlate security issues/events and review logs to identify intrusions for remediation. Correlate suspicious events with network events, if possible, and data stored within databases and other external DoD resources, including but not limited to Big Data Platform (BDP).
• Record who, what, where, why and when for any identified suspicious activity in case management system (CMS) case to enable additional investigations.
• Conduct 24x7x365 near real‑time network security monitoring and intrusion detection analysis for the networks, systems monitored using DoD Custom.

Required Skills and Experience

• TS/SCI Clearance
• GCFA Certification (GIAC Certified Forensic Analyst) or multiple SANS Certifications 5+
• Ability to work a 24/7/365 support mission
• 1-4 years of experience working with DoD customers in Cyber Intrusion or Cyber Defense Operations/Analysis

Seniority level

Entry level

Employment type

Full-time

Job function

Information Technology

Industries

Staffing and Recruiting

Referrals increase your chances of interviewing at Insight Global by 2x.