Cyber Defense Operator, Intermediate - 24/7 SOC

SMS DATA PRODUCTS GROUP, INC; San Antonio (TX); On-site; USD 110,000 - 150,000; Full time

Job summary

SMS DATA PRODUCTS GROUP, INC is seeking a Cyber Defense Operator to support AFCERT missions through continuous near real time network security monitoring and intrusion detection across the Air Force Information Network. You will operate within the HAC to sustain MR status and support 24x7x365 mission operations.

The role requires a minimum of five years in cyber defense, DoD/IC clearance, GCFA, and familiarity with Kill Chain, MITRE ATT&CK, and NIST frameworks, with strong emphasis on SIEM/EDR

Qualifications

• Minimum of five years in cyber defense operations within a DoD or IC environment.
• Active DoD TSSCI clearance required.
• High School Diploma or GED required.
• GCFA certification.
• Candidate has 120 days to obtain GCFA after hire.
• Knowledge of Cyber Kill Chain, MITRE ATT&CK, and NIST 800-series frameworks.
• Knowledge of computer components, architectures, TCP/IP, OSI models, and related networking concepts.
• Self-motivated and able to perform with minimal supervision.

Responsibilities

• Conduct near real time network security monitoring and intrusion detection analysis across networks and systems.
• Review IDS/IPS alerts per operating instructions and checklists.
• Conduct host security monitoring and event triage.
• Develop, review, and maintain procedures for monitoring hosts/systems.
• Monitor sensors to analyze IDS/IPS and SIEM data to identify issues and review logs for remediation.
• Correlate suspicious events with network data and external DoD resources.
• Analyze traffic logs to determine necessity for deeper analysis and initial intrusion assessment.
• Record activity details in the CMS to enable investigations.
• Triage suspicious activity alerts to make fast, accurate decisions.
• Enter event data into mission support systems per procedures and reports.
• Escalate security incidents following established policies.

Skills

GCFA

DoD IC environment

Self-motivated

Education

High School Diploma or GED

Tools

SIEM

EDR

Packet capture

Job description

SMS DATA PRODUCTS GROUP, INC is seeking a Cyber Defense Operator to support AFCERT missions through continuous near real time network security monitoring and intrusion detection across the Air Force Information Network. You will operate within the HAC to sustain MR status and support 24x7x365 mission operations.

The role requires a minimum of five years in cyber defense, DoD/IC clearance, GCFA, and familiarity with Kill Chain, MITRE ATT&CK, and NIST frameworks, with strong emphasis on SIEM/EDR