Cyber Incident Responder — 24/7 Defense Network Operations

VulnU; Northern (KY); Hybrid; USD 76,000 - 114,000; Full time

Benefits offered by this job

Health insurance

Savings plan

Paid time off

Education assistance

Flexible work arrangements

Job summary

Northrop Grumman Space Systems—Missile Defense Integration seeks a Cyber Incident Analyst Responder – Regional CNDA to join a 24x7 operations team at Schriever Space Force Base, CO. You will monitor networks, perform incident response, collect and analyze security data, and coordinate with cyber teams to protect critical DoD networks.

Applicants must have DoD-level security clearances, appropriate certifications, and experience with IDS, firewalls, log tools, and vulnerability scanners.

Qualifications

• Active government clearance (Secret) and IAT Level II or higher certification.
• Bachelor's or Master’s degree with related security experience or equivalent.
• Experience identifying worms/viruses via signatures and behavior.

Responsibilities

• Monitor network security and perform incident response for BMD/COMNET.
• Collect, correlate, and present security data for ORM decisions.
• Operate and maintain CND tools to protect mission systems.
• Coordinate with cybersecurity teams to implement defenses.
• Document incidents and lessons learned; contribute to playbooks.

Skills

Security clearance knowledge

Network security monitoring

Intrusion detection

Incident response

Log analysis

Security tools

Education

Bachelor's degree in Computer Science or related

Master's degree in related field

9+ years experience in lieu of degree

Tools

IDS/IPS

Firewalls

Log aggregation

Vulnerability scanners

HBSS

ArcSight

Tripwire

Job description

Northrop Grumman Space Systems—Missile Defense Integration seeks a Cyber Incident Analyst Responder – Regional CNDA to join a 24x7 operations team at Schriever Space Force Base, CO. You will monitor networks, perform incident response, collect and analyze security data, and coordinate with cyber teams to protect critical DoD networks.

Applicants must have DoD-level security clearances, appropriate certifications, and experience with IDS, firewalls, log tools, and vulnerability scanners.