Defensive Cyber Analyst

Quantum Sky; Colorado Springs (CO); On-site; USD 90,000 - 130,000; Full time

Job summary

Quantum Sky in Colorado Springs seeks a Defensive Cyber Analyst to support the US Space Force under the D6 contract. This 100% onsite, day shift role focuses on continuous cybersecurity monitoring, intrusion detection, and rapid cyber incident response.

Responsibilities include analyzing incidents, tuning tools, monitoring DCO systems, and developing DCO TTPs. Required are 1–3 years in cybersecurity and CSSP certifications, with familiarity in Elastic, Splunk, Suricata, Wireshark and scripting.

Qualifications

• 1–3 years of Cybersecurity/IT experience.
• Active DoD CSSP certification (Analyst or Incident Responder) required.
• Experience with continuous monitoring, intrusion detection and incident response.

Responsibilities

• Analyze cyber incidents, correlate details and formulate response actions.
• Provide recommendations to tune and maximize tools and suggest additional tooling.
• Monitor government provided DCO tools and systems.
• Conduct after action reviews to capture mitigation efforts.
• Contribute to development of DCO TTPs and procedures.
• Identify security gaps and report incidents.
• Provide expert research to support program expansion.

Skills

Cybersecurity experience

Continuous monitoring

Intrusion detection

Cyber incident response

DoD CSSP Analyst/Incident Responder

Tools

Elastic Stack

Kibana

Suricata

Splunk

Snort

Wireshark

Bro/Zeek

tcpdump

ACAS

Microsoft Office 365

Python

Bash scripting

Job description

Quantum Sky has an opening for a Defensive Cyber Analyst to support the United States Space Force (USSF) D6 Contract by providing continuous Cybersecurity Monitoring, Intrusion Detection and Cyber Incident Responses. This is 100% onsite and will be day shift hours.

Responsibilities

• Analyze cyber incidents, correlate incident details and formulate response actions.
• Provide recommendations on tuning and maximizing capability of existing tools, while providing recommendations for other tools to increase capability.
• Monitor government provided DCO tools and systems.
• Conduct after action processes to capture efforts taken to mitigate unauthorized actions.
• Participate in development of DCO Tactics, Techniques and Procedures (TTPs).
• Participate in development of DCO concept of operations, processes and procedures.
• Identify security discrepancies and report security incidents.
• Provide expert research and analysis in support of expanding programs and area of responsibility.

Required

• Minimum of one (1) active DoD 8570.07-M Cyber Security Services Provider (CSSP) "Analyst" or "Incident Responder" certifications:
• CEH, CySA+, GCIH, GCIA, CFR, CCNA Cyber Ops, CCNA-Security, GICSP, Cloud+, SCYBER, PenTest+, CHFI or GCFA
• 1-3 years of Cybersecurity/IT experience
• Experience performing Continuous Cybersecurity Monitoring, Intrusion Detection and Cyber Incident Response.
• Cybersecurity Service Provider (CSSP) experience is preferred.
• Familiarity with Space Operations is highly desired.
• Experience with the following tools:
• Elastic Stack, Kibana, Suricata, Splunk, Snort, Wireshark, Bro/Zeek logs, tcpdump, editcap, ACAS, Microsoft Office 365, Python or Bash scripting.

Clearance

• Active DoD TS/SCI clearance

Schedule/Shift

• Night Shift 645p-645a MT, either Sun-Tues, or Thurs-Sat, and every other Wed.