Defensive Cyberspace Operations Engineer

ITS, LLC; Colorado Springs (CO); On-site; USD 110,000 - 170,000; Full time

Job summary

ITS, LLC. in Colorado Springs, CO seeks a Defensive Cyberspace Operations Engineer to join our security-focused team. The role focuses on designing, deploying, and tuning defensive cyber capabilities to protect, detect, and respond to threats across enterprise IT and networks.

The ideal candidate has deep experience in cyber defense, SIEM/IDS tooling, and a solid foundation in Linux/Windows, with TS/SCI clearance and IAT Level II certification.

Qualifications

• Bachelor’s degree in a cyber-related discipline is required.
• IAT Level II certification is required.
• Top Secret/SCI clearance is required.
• Minimum 5 years of technical cyber-defense experience.
• Experience with container/virtual environments (Docker/Kubernetes/AWS).
• Experience with SIEM/IDS/IR tools (SIEM, IDS, SOAR).

Responsibilities

• Consults on IT and cyber defensive architecture and technologies.
• Assesses assigned Cyber domain to understand mission, architecture and threat.
• Advises on design and implementation of Defensive Cyber Operations capabilities.
• Researches cyber defense technology options for best fit based on mission and threat.
• Designs, implements, configures and tunes Cyber Defense technology.
• Authors documentation: SOPs, guides, diagrams, crew binders, etc.
• Develops and tunes cyber tools and technology like ELK, Kafka, Suricata, BRO, Cuckoo, Yara.

Skills

Cyber defense experience

Network security

Linux

Windows

Incident response

Education

Bachelor’s degree in cyber-related discipline

Tools

Docker

Kubernetes

VMware

AWS

Gigamon

Elastic Search

Logstash

Kibana

Splunk

Suricata

BRO

Cuckoo

Yara

Job description

Job Summary

ITS, LLC. is seeking a Defensive Cyberspace Operations (DCO) Engineer to join our dynamic team in Colorado Springs, CO

Key Responsibilities

• Consults on IT and cyber defensive architecture and technologies
• Assesses assigned Cyber domain to thoroughly understand the mission, architecture and threat
• Advises on technical design and implementation of Defensive Cyber Operations capability required to effectively protect, detect and respond to cyber threats and attack
• Research cyber defense technology options for best fit based on mission, architecture and threat
• Design, implement, configure and/or tune Cyber Defense technology
• Authors documentations to include SOPs, checklists, implementation guides, architecture diagrams, crew binders, etc.
• Adapt technologies to meet best fit for the mission architecture and threat. Technologies include SIEM, vulnerability assessment, discovery, infrastructure (firewall, IPS/IDS, proxy, network capture), host-based security, PCAP, penetration testing/external assessment tools, forensics, etc.
• Develop and tune cyber tools and technology like ELK, Kafka, Suricata, BRO, cuckoo, yara, etc.

Preferred Qualifications

• 5 years of technical experience in cyber-defense or cyber security related fields (e.g., engineering, networking, systems integration, solutions etc.)
• 5 years of professional technical experience (these years may be in conjunction with #2) Experience years must come from at least 2 of the following areas:
• Container or virtual environments (e.g. Docker, Kubernetes, VMware, AWS)
• In-band and out-of-band test access points for network traffic collection and aggregation (e.g. Gigamon)
• Data storage solutions (e.g. NFS storage, distributed storage, Ceph Ruck storage, etc.)
• Data-analysis toolsets (e.g. Elastic Search, Logstash, Kibana, Splunk, etc.)
• Agile frameworks for software development
• Linux operating systems (Red Hat, Kali, etc.)
• Windows operating systems
• Network infrastructure
• Security applications (Security Orchestration, Automation, and Response [SOAR], Security Information and Events Management [SIEM], Intrusion Detection Systems [IDS], etc.)

Required Certification

• IAT Level II certification

Education/Experience

• Bachelor’s degree in a cyber-related discipline (e.g. network engineering, computer science, information systems, software engineer, programming, etc.)

Clearance Requirement

• Top Secret/SCI

Salary Note

• In compliance with Colorado’s Equal Pay for Equal Work Act, the salary range for this role is based on education, experience, and responsibilities.

ITS, LLC. is an equal-opportunity employer to include veterans and individuals with disabilities.

U.S. Citizenship is required.

Physical Requirements

• The work is typically performed in an office environment, which requires normal safety precautions; work may require some physical effort in the handling of light materials, boxes, or equipment.