Cyber Threat Analysis Support

BTAS, Inc.; Scott Air Force Base (IL); On-site; USD 85,000 - 105,000; Full time

Benefits offered by this job

Paid time off

Health coverage

401K plan with generous company match

Job summary

BTAS, Inc. is seeking a Cyber Threat Analysis Support at Scott Air Force Base, IL. The role provides on-site cyber threat analysis for USTRANSCOM with after-hours support for incident response and exercises.

Responsibilities include analyzing DoDIN events, collecting security data, and sharing insights with intelligence and cyber defense teams. The position requires CySA+ certification and 5+ years in threat analysis.

Qualifications

• 5+ years monitoring vulnerabilities, anomalies and threats with SIEM tools.
• 5+ years incident response including containment, eradication and recovery.
• CySA+ certification.

Responsibilities

• Perform threat analysis to support DoDIN operations and protect USTRANSCOM systems.
• Collect, analyze, and report security events within mission environment and enclaves.
• Maintain monthly metrics on cyber threat analysis activity.
• Update documentation on threat analysis processes and procedures.

Skills

Threat analysis

Incident response

SIEM tools

Security monitoring

Tools

CySA+ Certification

Job description

POSITION: Cyber Threat Analysis Support

LOCATION: O’Fallon, Illinois, Scott Air Force Base

REQUIRED SECURITY CLEARANCE: Top Secret with SCI eligibility

POSITION TYPE/STANDARD WORK HOURS: Full-time 40 hours per week

THE OPPORTUNITY

The United States Transportation Command (USTRANSCOM) located at Scott Air Force Base (AFB), IL, is one of 11 Unified Combatant Commands (UCC). USTRANSCOM provides command and control (C2) for the synchronized transportation, distribution, and sustainment of personnel and assets, making possible the projection and maintenance of national power wherever needed with speed and agility, high efficiency, and a high level of trust and accuracy.

The Cyberspaces Operations Forces’ (COF) mission is to provide DODIN Operations, defensive cyber operations-internal defensive measures, and overall cyberspace operations in support of USTRANSCOM network systems and missions. COF provides mission-tailored, joint capability packages to Combatant Commanders to facilitate rapid establishment of Joint Force Headquarters, fulfill Global Response Force execution and bridge joint operational requirements. The COF delivers unmatched joint operational command and control enablers to Joint Force Commanders conducting emergent full spectrum operations. The Command, Control, Communications, and Cyber (C4) Systems (C4S) Directorate (J6) provides essential Command, Control, Communications, and Collaboration Support (C5S) services to the USTRANSCOM Commander in performance of the command’s mission to provide mission-tailored, joint capability packages to meet national security objectives.

The Cyber Threat Analysis Support position will execute cyber threat analysis processes and procedures IAW DoD policy and USTRANSCOM Government direction. The position will provide cyber threat analysis and escalation support to USTRANSCOM’s CSSP and Defensive Cyber Operations (DCO) missions on-site support at Scott AFB from 0730 to 1630 local time, Monday through Friday, and afterhours and weekend support, as required to support incident response and exercise activities with a one (1) hour response time to begin work.

WHO WE ARE

BTAS is a woman-owned small business founded in 1995, located near Wright-Patterson Air Force Base in Beavercreek, OH. We have earned national and regional awards in the Department of Defense for our proven IT, Engineering, and Program Management capabilities.

We are committed to working with exceptional quality and professionalism to deliver excellence to our customers, while providing our employees with a stimulating and satisfying work environment as we collaborate with teammates to achieve common goals.

PRIMARY RESPONSIBILITIES

• Perform threat analysis to support Department of Defense Information Network (DoDIN) operations for protection and defense of USTRANSCOM information systems and networks.
• Collect, analyze, and report on security events that affect the operation of USTRANSCOM information systems that are hosted within USTRANSCOM’s and CSSP subscriber enclaves, and for systems hosted elsewhere for which USTRANSCOM is the Authorizing Official (AO).
  • Gather information on cybersecurity events within USTRANSCOM’s mission environment.
  • Perform analysis and correlation on cybersecurity events.
  • Collaborate with other cyber defense organizations (including but not limited to TCCs; Combatant Commands; Services and Agencies; Federal, regional, and local law enforcement agencies; National Intelligence organizations; and organizations identified via local monitoring capabilities).
  • Collaborate with USTRANSCOM’s intelligence community and cyber operational forces.
• Collect, analyze, and report security events that affect the operation of USTRANSCOM’s mission environment and identified KT-C.
  • Gather information on cybersecurity events within USTRANSCOM’s mission environment.
  • Maintain an awareness of active cyber threat actors and associated threat sets.
  • Predict trends in cyber threat activity relative to USTRANSCOM operations or interests.
  • Highlight potential effects to system performance and mission capabilities
• Collect and provide the Government with monthly metrics on cyber threat analysis activity.
• Maintain current documentation on cyber threat analysis processes and procedures and provide to the Government.
  

MINIMUM QUALIFICATIONS

• 5+ years of experience with monitoring and identifying vulnerabilities, anomalies, and active threats; looking at the network from an investigative perspective, using security Information and Event Management (SEIM) tools to analyze traffic data
• 5+ years of experience with incident response, including containment, eradication, and system recovery
• CySA+ certification

SUPERVISORY RESPONSIBILITIES

This position does not supervise others.

WORK ENVIRONMENT

This job operates in a professional office environment. This role routinely uses standard office equipment.

PHYSICAL DEMANDS

Must be able to operate a computer and other standard office equipment. Must be able to remain in a stationary position, 80%.

TRAVEL

Minimal travel, 5 – 10%.

OTHER DUTIES

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and/or activities may change at any time with or without notice.

COMPENSATION

BTAS adheres to federal, state, and local regulations. This is a Full-Time, Salary, Exempt position. Salary is subject to a variety of factors, including but not limited to years of experience, education, certification(s), training, specialized skills, responsibilities, etc. The salary range for this position is $85,000 - $105,000 annually.

BTAS BENEFITS

• A comprehensive benefits program, including paid time off, federal holidays, health coverage, 401K plan with generous company match is offered to all full-time employees. Part-time employees may have access to limited benefits.

AAP / EEO STATEMENT

BTAS is an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other characteristic protected by law.

BTAS is an E-Verify program participant.