Cyber Defense Operator — TS/SCI (DoD Mission-Critical)

SMS Data Products Group, Inc.; Del Rio (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

SMS Data Products Group, Inc. is seeking a Cyber Defense Operator to support AFCERT missions with 24x7 monitoring, IDS/IPS analysis, and host security across the AFIN. The role requires active TS/SCI clearance and hands-on experience in DoD environments.

The operator will work in a rotating crew, develop and maintain procedures, and produce MISREPS for knowledge transfer to future teams. Strong emphasis on timely incident triage and collaboration with field units.

Qualifications

• Minimum five (5) years of experience in cyber defense operations, network security monitoring, intrusion detection analysis, or a related discipline within a DoD or Intelligence Community environment.
• Active TS/SCI clearance required.
• High School Diploma or GED required.
• 8140 IAT Level 1 CND & GCFA certified
• General knowledge of cyber security frameworks (Cyber Kill Chain, MITRE ATT&CK, NIST 800 series)
• Knowledge of computer domains, directory services, networks, and security hardware/software

Responsibilities

• Conduct near real-time network security monitoring and intrusion detection analysis across networks and systems.
• Review IDS/IPS alerts per OI and checklists.
• Conduct host security monitoring, alert review, intrusion detection analysis, and event analysis and triage.
• Develop, review and maintain procedures related to monitoring of Hosts/Systems.
• Monitor security sensors to analyze IDS and SIEM to identify and correlate security issues/events and review logs to identify intrusions for remediation.
• Correlate suspicious events with network events and data from databases and external DoD resources.
• Analyze traffic/logs/events to determine need for higher level analysis and assess intruder activity extent.
• Record who/what/where/when for identified activity in CMS to enable investigations.
• Triage suspicious activity alerts and logs to make fast accurate triage decisions.
• Enter event data into mission support systems per procedures and reports.
• Escalate security incidents per policies and procedures.
• Generate end of mission reports (MISREPS) and pass-on information for knowledge transfer to next crews.
• Provide computer security support to AF field units.
• Feedback on detection mechanisms (true/false positives) to Content Development.

Skills

Cyber defense operations

Network security monitoring

Intrusion detection analysis

Active TS/SCI clearance

Self-motivated

Education

High School Diploma or GED

IAT Level 1 CND & GCFA certified

Tools

SIEM

EDR

IDS/IPS

CMS workflows

Job description

SMS Data Products Group, Inc. is seeking a Cyber Defense Operator to support AFCERT missions with 24x7 monitoring, IDS/IPS analysis, and host security across the AFIN. The role requires active TS/SCI clearance and hands-on experience in DoD environments.

The operator will work in a rotating crew, develop and maintain procedures, and produce MISREPS for knowledge transfer to future teams. Strong emphasis on timely incident triage and collaboration with field units.