IT Systems Analyst V (AFCAT) Endpoint Security Solutions (ESS)

Computer World Services; San Antonio (TX); On-site; USD 90,000 - 120,000; Full time

Job summary

Computer World Services is seeking a Cyber Readiness professional to support AFCAT in the 688th Cyberspace Wing, performing CORAs to harden DoWIN and enhance cyber defense posture. You will work on endpoint security, network vulnerability, and insider threat assessments, collaborating with base leadership and wing staff.

Responsibilities include coordinating training, ensuring certification compliance, and traveling as needed.

Qualifications

• Requires a bachelor's degree (or equivalent) +5 years of experience, or 8+ years of related experience.
• Excellent verbal and written communication skills.
• Excellent critical thinking skills.

Responsibilities

• Determine focus areas for training in consultation with supervisor.
• Maintain certification requirements per technology area with annual assessments.
• Utilize DCDC standard processes and procedures for assessments.
• Stay informed on 688 CW/CC, AFCYBER/CC priorities to inform base selection.
• Assist base leadership with progress summaries and risk communication.
• Coordinate travel arrangements for assessment team members.
• Complete supervisory and administrative tasks as required.
• Validate firewall configurations across multiple servers.
• Review audit logs and account management policies.
• Operate assessment tools per DCDC standards.
• Conduct evaluations of MDE and TrellixESS configurations against baselines.

Skills

CORA knowledge

Security posture

Communication skills

Education

Bachelor's degree (or equivalent)

Tools

Cisco

Forescout

Audit/Log review

Job description

This position supports the Air Force Cyber Assessment Team (AFCAT) in the 688th Cyberspace Wing and conducts Cyber Operational Readiness Assessments (CORA) at Air Force locations around the world. These assessments will help strengthen the posture and resiliency of the DoW Information Network (DOWIN) by supporting commanders and directors in their efforts to harden their information systems, reduce the attack surface of their cyber terrain, and enhance a more proactive defense.

Team members will specialize in Cyber Operational Readiness Assessments (CORA), focusing on areas such as endpoint security, network vulnerability, insider threat, and more. This role helps ensure Air Force compliance and effectiveness in cyber defense strategies.

Key Tasks & Responsibilities

• Determine, in conjunction with supervisor, the technology areas to focus personal training on and when to enter the program for required training

• Contractor shall obtain DCDC certification ESS: Security Fundamentals Professional Certification (SFPC) and complete required assessments and evaluations. Training must be completed no more than six months prior to the On-the-Job Training (OJT), check ride, and assessments

• Ensure all certification requirements are up to date, including a minimum of 4 assessments per technology area each fiscal year

• Contractor shall utilize appropriate tools and methodologies based on DCDC standard processes and procedures

• Stay informed on 688 CW/CC, AFCYBER/CC, and larger Air Force strategic priorities to inform base selection for CORAs

• Advocate with wing organizations for access to enterprise assets and capabilities to prepare for CORA

• Support daily assessment meetings to track progress and provide summaries to base leadership and 688 CW leadership

• Complete assessment checklists as required

• Participate in regular teleconferences with base comm squadron leadership to identify issues and inform commanders on risk

• Provide written feedback on process update recommendations

• Coordinate travel arrangements with fellow assessment team members

• Complete supervisory and administrative tasks as required

• Complete other duties as assigned

• Validate firewall configuration across multiple servers

• Utilize tools that enforce network access control (i.e. Cisco, Forescout)

• Review audit logs, logging and account management policies

• Utilize appropriate assessment tools and methodologies based on DCDC standard processes and procedures

• Conduct technical evaluations of MDE and TrellixESS configurations against established security baselines (e.g., STIGs, SRGs) and industry best practices

Education & Experience

• Requires a bachelor's degree (or equivalent) +5 years of experience, or 8+ years of related experience

• Must have excellent verbal and written communication skills

• Must have excellent critical thinking skills

Desired:

• Experience with Microsoft Defender for Endpoint (MDE)

Certifications

Required:

• IAT II – Sec+, CASP+, or higher

Desired:

• Microsoft Certified: Windows Server Hybrid Administrator Associate

• Oracle Database SQL Certified Associate Certification

• Certified Protection Professional (CPP)

• Microsoft Certified Security Operations Analyst Associate

Security Clearance

Required:

Must have active Secret clearance with ability to obtain a Top-Secret clearancewith SCI eligibility

Desired:

Active Top Secret Clearancewith SCI eligibility

Other (Travel, Work Environment, DoD 8570 Requirements, Administrative Notes, etc.)

• Anticipate team members travelling 6 to 7 weeks per year but could be more or less

• Must possess or obtain a US Passport within 6 months

• Must be able to fund your travel up front and you will be reimbursed upon filing expense report

Computer World Services is an affirmative action and equal employment opportunity employer. Current employees and/or qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, disability, protected veteran status, genetic information or any other characteristic protected by local, state, or federal laws, rules, or regulations.

Computer World Services is committed to the full inclusion of all qualified individuals. As part of this commitment, Computer World Services will ensure that individuals with disabilities (IWD) are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Human Resources at [e-mail].