Defensive Cyber Operations (DCO) Analyst - Temporary

Quantum Sky; Colorado Springs (CO); On-site; USD 90,000 - 130,000; Full time

Job summary

Quantum Sky in Colorado Springs is seeking a temporary Defensive Cyber Analyst to support the USSF D6 contract with continuous cybersecurity monitoring, intrusion detection, and incident response.

Responsibilities include analyzing cyber incidents, tuning existing tools, monitoring DCO tools, and contributing to DCO TTPs and SOPs. Applicants should have DoD CSSP certification and a relevant IT degree or military cyber training.

Qualifications

• Active DoD CSSP certification (Analyst or Incident Responder) required.
• B.S. in IT/Cybersecurity or related military IT training.
• 1–3 years of cybersecurity/IT experience for continuous monitoring and incident response.

Responsibilities

• Analyze cyber incidents and correlate details to guide responses.
• Recommend tuning and new tool capabilities to improve coverage.
• Monitor government-provided DCO tools and systems.
• Document after-action steps to capture mitigation actions.
• Develop DCO TTPs and SOPs for operations and training.
• Identify security discrepancies and report incidents in a timely manner.

Skills

CSSP Analyst

Incident Responder

Cybersecurity Monitoring

Intrusion Detection

Education

Bachelor's degree in IT/Cybersecurity

Tools

Elastic Stack

Kibana

Suricata

Splunk

Snort

Wireshark

Bro/Zeek

tcpdump

editcap

ACAS

Office 365

Python scripting

Bash scripting

Job description

Quantum Sky has an opening for a temporary Defensive Cyber Analyst to support the United States Space Force (USSF) D6 Contract by providing continuous Cybersecurity Monitoring, Intrusion Detection and Cyber Incident Responses. This position is planned to go until June 2027.

Responsibilities:

• Analyze cyber incidents, correlate incident details and formulate response actions.
• Provide recommendations on tuning and maximizing capability of existing tools, while providing recommendations for other tools to increase capability.
• Monitor government provided DCO tools and systems.
• Conduct after action processes to capture efforts taken to mitigate unauthorized actions.
• Participate in development of DCO Tactics, Techniques and Procedures (TTPs).
• Participate in development of DCO concept of operations, processes and procedures.
• Identify security discrepancies and report security incidents.
• Provide expert research and analysis in support of expanding programs and area of responsibility.

Required:

• Minimum of one (1) active DoD 8570.07-M Cyber Security Services Provider (CSSP) "Analyst" or "Incident Responder" certifications:
• BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science OR
• Appropriate Military IT/cyber training (M03385G; M10395B; M223854 or A-150-1980 or A-150-1202 or A-150-1203 or A-150-1250 or A-531-0451 or A-531-4421 or A-531-1900 or WSS 011 or DISA-US1377)
• 1-3 years of Cybersecurity/IT experience
• Experience performing Continuous Cybersecurity Monitoring, Intrusion Detection and Cyber Incident Response.
• Cybersecurity Service Provider (CSSP) experience is preferred.
• Familiarity with Space Operations is highly desired.
• Experience with the following tools:
• Elastic Stack, Kibana, Suricata, Splunk, Snort, Wireshark, Bro/Zeek logs, tcpdump, editcap, ACAS, Microsoft Office 365, Python or Bash scripting.

Clearance:

• Active DoD TS/SCI clearance

Schedule/Shift:

• Night Shift 645p-645a MT, either Sun-Tues, or Thurs-Sat, and every other Wed.