Cyber Operations Analyst (Clearance Required

Zachary Piper, LLC; Fort Meade (MD); In loco; USD 120.000 - 180.000; Tempo pieno

Descrizione del lavoro

Zachary Piper, LLC is seeking a highly skilled Cyberspace Defense professional to operate in real time under mission requirements. The role involves incident handling, event triage, network analysis, threat detection, trend analysis, and vulnerability information dissemination following DoD CNDS methodology.

Key responsibilities include coordinating CND operations with DoD components, providing PIRs and IOC requirements to the Intelligence Community, and shaping CNDS education and awareness

Competenze

• Active DoD TS/SCI clearance and eligible for C/I Polygraph.
• Experience with CNDS providers or in a CNDSP.
• Technical understanding of TCP/IP, malware basics, and CNDS operations.
• Experience in an Operations Center briefing senior leaders and producing SITREPs.
• Bachelor's degree in a relevant technical discipline or 4+ years of related experience.

Mansioni

• Execute in real time according to mission requirements: incident handling, event triage, network analysis, threat detection, trend analysis, metric development, and vulnerability information dissemination.
• Coordinate CND operations with CC/S/A/FA and monitor effect on missions.
• Provide PIR and indications & warning requirements to IC regarding potential attacks against DoD information systems.
• Coordinate CNDS providers to ensure synchronized execution of COAs and rapid COA overrides when needed.
• Develop and deliver CNDS education training curriculum across CNDS certification and accreditation processes.

Conoscenze

Incident handling

Threat detection

Network analysis

DoD CNDS knowledge

Communication to leadership

SITREPs

Operational planning

Formazione

Bachelor's degree in a relevant technical discipline

Strumenti

ArcSight

JIMS

CSAAC

Splunk

PCAP

Descrizione del lavoro

JOB SUMMARY:

The selected candidate shall execute in real time, in accordance with mission requirements, incident handling, triage of events, network analysis and threat detection, trend analysis, metric development, vulnerability information dissemination, and the DoD CNDSP methodology.

Shifts:

• Team 1 – 0500 – 1500/Monday – Thursday
• Team 2 – 1300 – 2300/Monday – Thursday
• Team 3 – 2100 – 0700/Monday – Thursday
• Team 4 – 0420 – 1730/Friday – Sunday
• Team 5 – 1620 – 0530/Friday – Sunday

PRIMARY RESPONSIBILITIES:

• Execute in real time, in accordance with mission requirements:
  • Incident handling
  • Triage of events
  • Network analysis and threat detection
  • Trend analysis
  • Metric development
  • Vulnerability information dissemination
  • DoD CNDSP methodology
• Coordinate Computer Network Defense (CND) operations with DoD Component Commands/Services/Agencies/Field Activities (CC/S/A/FA) and monitor and report effect of DCO-IDM operations on CC/S/A/FA missions.
• Provide the Intelligence Community (IC) with priority intelligence requirements (PIR) and indications and warning requirements for potential attacks against DoD information systems and computer networks.
• Centrally coordinate and/or recommend CND operations that impact more than one DoD Component.
• Provide Defense-wide situational awareness and attack sensing and warning through fusion, analysis and coordinated information flows.
• De-conflict Vulnerability Analysis and Assessments (VAA) and Red Teaming with CND operations, and recommend changes to in progress or planned VAAs that may negatively impact CND operations.
• Monitor the DoDIN for IAVA compliance and assess impact on defense of DoD computer networks.
• Develop a coordinated curriculum for CND education training, awareness, professionalization, and ensure the implementation of the curriculum throughout the CNDS certification and accreditation process.
• Ensure that all Computer Network Defense Service (CNDS) providers have continuous information exchange and work together in synchrony, i.e., simultaneously execute a single prescribed Course of Action (COA) and that at any given time, a new COA can override the existing one. Coordination among CNDS providers is primarily effected through the CNDS Certification Authorities (CNDS/CAs) on behalf and under the direction of the USCYBERCOM.
• Recommend Information Operations Conditions (INFOCON) changes in response to unauthorized activity (e.g., computer network attacks, computer network exploitation, system misuse), and to mitigate potential damage to DoD information systems and computer networks.
• Have knowledge of DoD Computer Network Defense with an understanding of the lifecycle of the network threats, attack vectors, and network vulnerability exploitation.

BASIC QUALIFICATIONS:

• Active DoD TS/SCI clearance and eligible for C/I Polygraph
• Previous tools experience with *ArcSight, JIMS; Level II, Cyber Situational Awareness Cloud (CSAAC), and other SIEM Tools (Splunk, PCAP, or equivalent toolsets.)
• Previous experience working with CNDS providers or working in a CNDSP
• Technical understanding in some of the following areas: network communication using TCP/IP protocols, basic system administration, understanding of malware (malware communication installation, or malware types), Computer Network Defense operations (proxy, firewall, IDS/IPS, router/switch, or open source information collection), Joint Operational Planning Process (JOPP),
• Experience in an Operations Center providing and briefing Senior Leaders on threats and mitigation actions, SITREPs, Operational Updates, statistical support, strategic plans to harden defenses, and experience as an Action Officer (AO) to lead priority efforts
• Have working knowledge of threat and vulnerability analysis, routing protocols, routing, intrusion detection systems, intrusion protection systems, Domain Name Service, or network traffic analysis
• Bachelor's degree in a relevant technical discipline and 4+ years of overall related experience. 4+ years of additional related years of experience is accepted in lieu of a degree.
• Intermediate level – 4-8 years of experience
• Senior level – 8-12 years of experience

PREFERRED QUALIFICATIONS:

• DoD 8570 certification at IAT Level II, Security+ CE
• ITIL v3 Foundation certified
• Experience working with the Intelligence Community and priority intelligence requirements
• Advanced communications and presentations skills (verbal and written) enabling precise conveyance of information across all CC/S/A/FA with command and proper enunciation of the English language
• Strong interpersonal, organizational and critical thinking/problem solving skills
• Flexible, dependable and be able to multi-task with priorities
• Critical/logical thinking skills