Cybersecurity Operations Lead

Cwsc; Scott Air Force Base (IL); On-site; USD 95,000 - 130,000; Full time

Job summary

Computer World Services is seeking a Cyber Defense Analyst to lead all CSO activities under ARTRANS C4ISR and distribution operations, directing RMF, vulnerability management, security tool administration, and incident response across in-scope Army networks (NIPR/SIPR).

The candidate should have 6+ years of DoD cybersecurity operations experience, a full DoD 8140.03 qualification, and be residentially qualified for elevated access. A Secret clearance is required; [e-mail] is the contact.

Qualifications

• 6+ years of cybersecurity operations experience in a DoD environment.
• Full DoD 8140.03 foundational qualification.
• Residentially qualified at start for elevated access to systems.
• Experience achieving/sustaining ATO under RMF for Army systems.
• Secret clearance is required.

Responsibilities

• Direct RMF documentation and ATO sustainment; submit RMF packages via eMASS.
• Oversee weekly vulnerability scanning and POA&M management using Tenable/ACAS.
• Administer government-furnished security tools (Trellix ePO/HBSS, Cisco ISE, Palo Alto NGFW/Panorama, Splunk/SIEM, Symantec ProxySG).
• Lead incident response — identify, contain, eradicate, recover; report incidents; deliver Cybersecurity Scorecard data.

Skills

RMF framework

Vulnerability management

Incident response

Security tool administration

Tenable/ACAS

STIG/SCAP compliance

Automated security reporting

DoD cyber operations

Education

DoD 8140.03 foundational qualification

Tools

Trellix ePO/HBSS

Cisco ISE

Palo Alto NGFW/Panorama

Splunk SIEM

Symantec ProxySG

Job description

Leads all Cybersecurity Operations (CSO) under U.S. Army Transportation Command (ARTRANS) C4ISR and distribution operations, directing RMF, vulnerability management, security tool administration, and incident response across in-scope Army networks (NIPR/SIPR).

• Direct RMF documentation and Authorization to Operate (ATO) sustainment; submit RMF packages via eMASS and RMF Strategy
• Oversee weekly vulnerability scanning and POA&M management using Tenable/ACAS; STIG/SCAP compliance reporting
• Administer Government-furnished security tools (Trellix ePO/HBSS, Cisco ISE, Palo Alto NGFW/Panorama, Splunk/SIEM, Symantec ProxySG)
• Lead incident response — identify, contain, eradicate, recover; report incidents; deliver Cybersecurity Scorecard data and quarantine reports

• 6+ years of cybersecurity operations experience in a DoD environment (RMF, vulnerability management, incident response)
• Full DoDM 8140.03 foundational qualification prior to start. Residentially Qualified at the start of work for elevated access to any system, network, or enclave
• Experience achieving/sustaining ATO under RMF for Army systems;familiarity with USTCI 6600.01

• DCWF Work Role 621 - Cyber Defense Analyst, Intermediate proficiency. Common qualifying certifications: CySA+, GCIA, CEH
• Advanced certification such as CISSP, GCIH, or CASP+

• Secret clearance

Computer World Services is an affirmative action and equal employment opportunity employer. Current employees and/or qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, disability, protected veteran status, genetic information or any other characteristic protected by local, state, or federal laws, rules, or regulations.

Computer World Services is committed to the full inclusion of all qualified individuals. As part of this commitment, Computer World Services will ensure that individuals with disabilities (IWD) are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Human Resources at [e-mail].