IT Systems Analyst V (AFCAT) Endpoint Security Solutions (ESS)

Cwsc; San Antonio (TX); On-site; USD 90,000 - 130,000; Full time

Job summary

Computer World Services is seeking a candidate to conduct Cyber Operational Readiness Assessments (CORA) for the Air Force, focusing on endpoint security, vulnerability reviews, and insider threats. You will train on designated technology areas and ensure ongoing certifications are current.

Responsibilities include coordinating with leadership, performing assessments using DCDC procedures, and traveling as needed to base locations.

Qualifications

• Requires a bachelor’s degree (or equivalent) with 5+ years of related experience or 8+ years of experience.
• Excellent verbal and written communication skills.
• Must have critical thinking skills.

Responsibilities

• Perform CORA with focus on endpoint security, network vulnerability, and insider threat.
• Enter training requirements and track assessments per technology area.
• Maintain up-to-date certification requirements, including quarterly assessments.
• Utilize DCDC standard processes and tools for assessments.
• Coordinate travel and provide summaries to leadership.
• Review firewall configurations across multiple servers and review audit logs.

Skills

IAT II – Sec+, CASP+, or higher

Microsoft Defender for Endpoint (MDE)

Cybersecurity assessment

Communication skills

Education

Bachelor's degree (or equivalent)

5+ years of related experience

Tools

Cisco

Forescout

Windows Server administration

Job description

This position supports the Air Force Cyber Assessment Team (AFCAT) in the 688th Cyberspace Wing and conducts Cyber Operational Readiness Assessments (CORA) at Air Force locations around the world. These assessments will help strengthen the posture and resiliency of the DoW Information Network (DOWIN) by supporting commanders and directors in their efforts to harden their information systems, reduce the attack surface of their cyber terrain, and enhance a more proactive defense.

Team members will specialize in Cyber Operational Readiness Assessments (CORA), focusing on areas such as endpoint security, network vulnerability, insider threat, and more. This role helps ensure Air Force compliance and effectiveness in cyber defense strategies.

• Determine, in conjunction with supervisor, the technology areas to focus personal training on and when to enter the program for required training
• Contractor shall obtain DCDC certification ESS: Security Fundamentals Professional Certification (SFPC) and complete required assessments and evaluations. Training must be completed no more than six months prior to the On-the-Job Training (OJT), check ride, and assessments
• Ensure all certification requirements are up to date, including a minimum of 4 assessments per technology area each fiscal year
• Contractor shall utilize appropriate tools and methodologies based on DCDC standard processes and procedures
• Stay informed on 688 CW/CC, AFCYBER/CC, and larger Air Force strategic priorities to inform base selection for CORAs
• Advocate with wing organizations for access to enterprise assets and capabilities to prepare for CORA
• Support daily assessment meetings to track progress and provide summaries to base leadership and 688 CW leadership
• Complete assessment checklists as required
• Participate in regular teleconferences with base comm squadron leadership to identify issues and inform commanders on risk
• Provide written feedback on process update recommendations
• Coordinate travel arrangements with fellow assessment team members
• Complete supervisory and administrative tasks as required
• Complete other duties as assigned
• Validate firewall configuration across multiple servers
• Utilize tools that enforce network access control (i.e. Cisco, Forescout)
• Review audit logs, logging and account management policies
• Utilize appropriate assessment tools and methodologies based on DCDC standard processes and procedures
• Conduct technical evaluations of MDE and TrellixESS configurations against established security baselines (e.g., STIGs, SRGs) and industry best practices

Basic Qualifications

• Requires a bachelor's degree (or equivalent) +5 years of experience, or 8+ years of related experience
• Must have excellent verbal and written communication skills
• Must have excellent critical thinking skills

Desired

• Experience with Microsoft Defender for Endpoint (MDE)

Required

• IAT II – Sec+, CASP+, or higher

Desired

• Microsoft Certified: Windows Server Hybrid Administrator Associate
• Oracle Database SQL Certified Associate Certification
• Certified Protection Professional (CPP)
• Microsoft Certified Security Operations Analyst Associate

Required

• Must have active Secret clearance with ability to obtain a Top-Secret clearancewith SCI eligibility

Desired

• Active Top Secret Clearancewith SCI eligibility
• Anticipate team members travelling 6 to 7 weeks per year but could be more or less
• Must possess or obtain a US Passport within 6 months
• Must be able to fund your travel up front and you will be reimbursed upon filing expense repor t

Computer World Services is an affirmative action and equal employment opportunity employer. Current employees and/or qualified applicants will receive consideration for employment without regard to race, color, religion, sex, disability, age, sexual orientation, gender identity, national origin, disability, protected veteran status, genetic information or any other characteristic protected by local, state, or federal laws, rules, or regulations.

Computer World Services is committed to the full inclusion of all qualified individuals. As part of this commitment, Computer World Services will ensure that individuals with disabilities (IWD) are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact Human Resources at [e-mail].