On‑Site Cyber Intel & Penetration Tester — DCO-S Expert

ENSCO, Inc.; Colorado Springs (CO); Sur place; USD 85 000 - 115 000; Plein temps

Résumé du poste

ENSCO, Inc. is seeking an on-site Cyber Intel Analyst / Penetration Tester to support Defensive Cyberspace Operations for Space (DCO-S) capabilities protecting critical U.S. Space Force mission systems.

The Cyber Detection Engineer will evaluate sensor visibility, analyze telemetry, map MITRE ATT&CK techniques, and develop threat-informed visuals. Travel up to 10% to CONUS/OCONUS locations may be required.

Qualifications

• Bachelor’s degree in cybersecurity, computer science, information technology, engineering, data science, or a related field; 3+ years of relevant experience.
• Experience in detection engineering, threat hunting, incident response, network defense, security analytics, or SOC operations.
• Experience applying MITRE ATT&CK to adversary TTPs and telemetry.
• Experience analyzing endpoint, network, system, or security-event data with SIEM/EDR/NSM.
• Ability to develop and refine detection logic, queries, scripts, visualizations, and repeatable processes.

Responsabilités

• Analyze endpoint, network, system, and security-event telemetry to identify detection opportunities and visibility gaps.
• Map mission threats, telemetry, and detections to MITRE ATT&CK.
• Develop and maintain ATT&CK Navigator layers, detection-coverage heatmaps, and visualizations.
• Assess coverage for techniques and classify as fully covered, partially covered, unobserved, or unassessed.
• Develop, test, and automate detection logic, queries, scripts, and repeatable analytical processes.
• Evaluate and validate security data from sensors through parsing, normalization, enrichment, indexing, and visualization.
• Translate findings into operator guidance and recommended searches and data sources.
• Support purple-team and threat-emulation activities and document gaps and risks for leadership.
• Collaborate with cyber operators, threat analysts, system admins, and mission stakeholders to improve methods.

Connaissances

Threat hunting

Incident response

Detection engineering

MITRE ATT&CK

Telemetry analysis

Log-source validation

Analytical skills

Communication

Collaboration

Formation

Bachelor's degree in cybersecurity, computer science, information technology, engineering, data science, or related field

Outils

SIEM

EDR

Network security monitoring

Description du poste

ENSCO, Inc. is seeking an on-site Cyber Intel Analyst / Penetration Tester to support Defensive Cyberspace Operations for Space (DCO-S) capabilities protecting critical U.S. Space Force mission systems.

The Cyber Detection Engineer will evaluate sensor visibility, analyze telemetry, map MITRE ATT&CK techniques, and develop threat-informed visuals. Travel up to 10% to CONUS/OCONUS locations may be required.