Lead CSSP Analysis SME – 24/7 Cyber Incident (TS/SCI)

Feditc, Llc.; Indianapolis (IN); On-site; USD 120,000 - 160,000; Full time

Job summary

FEDITC, LLC, a fast-growing contractor, seeks a CSSP Analysis SME to lead 24/7 cybersecurity monitoring, threat analysis, and incident response for the CSSP program. The role requires an active Top Secret/Sci DoD clearance and US citizenship, with on-site presence at a designated location.

Responsibilities include leading staff, real-time SIEM correlation, incident handling, threat hunting, and coordination of reporting per DoD directives.

Qualifications

• Minimum 10 years of cybersecurity analysis experience in DoD or Federal environments with increasing responsibility.
• Expert-level knowledge of security event analysis, threat correlation, and incident response methodologies.
• Demonstrated expertise with enterprise SIEM platforms (Splunk, ArcSight, Microsoft Sentinel).
• Experience with cyber incident handling per NIST 800-61 and DoD incident reporting requirements.
• Strong knowledge of threat intelligence, malware analysis, and forensic investigation techniques.
• Experience with vulnerability management programs (ACAS, Nessus) and penetration testing.
• In-depth understanding of NIST 800-53, DISA STIGs, and DoD cybersecurity frameworks.
• Knowledge of DoD CSSP requirements, evaluations, and JFHQ-DODIN reporting.
• Proven ability to lead security analysis teams in high-pressure 24/7 operational environments.
• Ability to support COOP exercises and emergency operations.

Responsibilities

• Lead and supervise CSSP Analysis staff delivering 24/7 security event monitoring, analysis, and incident response.
• Direct real-time security event correlation, threat detection, and analysis using SIEM platforms (Splunk, ArcSight, Microsoft Sentinel).
• Manage cyber security incident response including detection, containment, eradication, and recovery operations.
• Oversee threat intelligence integration, indicator of compromise (IOC) analysis, and threat hunting activities.
• Coordinate internal and external incident reporting per JFHQ-DODIN, Cyber Command, and DFAS requirements.
• Lead audit support, security assessments, and compliance validation activities.
• Direct vulnerability analysis, penetration testing coordination, and remediation tracking.
• Develop and maintain incident response plans, playbooks, and analysis procedures.
• Support CSSP program operations including accreditation documentation and scoring metric compliance.
• Coordinate with DFAS ISSM, security teams, and external stakeholders on security incidents and findings.
• Ensure 100% compliance with DoD CSSP Evaluators Scoring Metrics and reporting requirements.

Skills

Cybersecurity analysis

DoD/Federal environments

Security event correlation

Incident response

Threat intelligence

Team leadership

24/7 operations

Education

BA/BS Degree

Tools

Splunk

ArcSight

Microsoft Sentinel

ACAS/Nessus

Job description

FEDITC, LLC, a fast-growing contractor, seeks a CSSP Analysis SME to lead 24/7 cybersecurity monitoring, threat analysis, and incident response for the CSSP program. The role requires an active Top Secret/Sci DoD clearance and US citizenship, with on-site presence at a designated location.

Responsibilities include leading staff, real-time SIEM correlation, incident handling, threat hunting, and coordination of reporting per DoD directives.