Defensive Cyber Operations (DCO) Analyst with Security Clearance

BreakPoint Labs, LLC; South Carolina; On-site; USD 70,000 - 100,000; Full time

Job summary

BreakPoint Labs seeks a Defensive Cyber Operations (DCO) Analyst to monitor and triage security events within a CSSP environment. The role involves responding to incidents, documenting findings, and supporting log correlation with SIEM tools on a 4-10 hour shift schedule (Sun-Wed or Wed-Sat).

The successful candidate will have 3+ years in CSSP/SOC or a bachelor’s degree, DoD 8570 IAT Level II and CSSP certifications, and experience with Splunk, Elastic, and Sentinel, as well as incident response

Qualifications

• Bachelor’s degree in a relevant technical field or 3+ years CSSP/SOC experience.
• DoD 8570 IAT Level II and CSSP certifications are required.
• Experience with log aggregation or SIEM tools is preferred.
• Familiarity with CJCSM 6510.01B.
• Experience with incident response, forensics, or threat hunting is desirable.

Responsibilities

• Monitor network and host-based systems for security events.
• Identify and validate suspicious activities.
• Escalate security incidents as required.
• Support foundational incident response procedures and reporting requirements.
• Document and track incident details to aid response and lessons learned.
• Participate in training to develop tool/process familiarity.
• Support log correlation using Splunk, Elastic, and Sentinel.
• Assist in program reviews and product evaluations as directed.
• Surge support may be required for incident response actions.

Skills

Incident response

Threat hunting

Analytical ability

Communication

Education

Bachelor's degree in a relevant technical field

Tools

Splunk

Elastic

Sentinel

Job description

BreakPoint Labs seeks a Defensive Cyber Operations (DCO) Analyst to be responsible for the continuous monitoring and initial triage of security events within a Cybersecurity Service Provider (CSSP) environment. Work takes place on four ten-hour shifts (Sunday-Wednesday or Wednesday – Saturday). Responsibilities include: - Monitor network and host-based systems.

• Identify and validate of suspicious activities.
• Escalate security incidents as required.
• Provide support for foundational incident response procedures.
• Comply with established reporting requirements with accuracy and timelines.
• Assist in managing incident response by documenting and tracking details.
• Participate in training to develop familiarity with tools and processes.
• Support log correlation tasks using tools like Splunk, Elastic, and Sentinel.
• Assist in program reviews and product evaluations as directed
• Surge support may be required to support incident response actions.
• Required Experience: - 3+ years of experience working in CSSP, SOC, or similar environment, OR, Bachelor’s degree in relevant technical field.
• Must have DoD 8570 IAT Level II and CSSP-specific certifications.
• Experience with Log Aggregation Tools (e.g., Splunk, Elastic, Sentinel) preferred.
• Experience with IDS/IPS, host-based, and operating system logging solutions.
• Knowledge of Incident Response methodologies and procedures strongly preferred.
• Experience with digital forensics, threat hunting, and/or incident response desired.
• Familiarity with CJCSM 6510.01B.
• Analytical ability and strong verbal and written communication skills required.
• Certifications Required: DoD 8570 IAT Level II and CSSP-specific certifications, CND and 8140. Clearance Required: DoD Secret Education Level required: Bachelor’s Degree Area(s) of Study Relevant technical discipline OR 3+ years equivalent experience