Senior CSSP Analysis Lead - 24/7 DoD Cyber Defense (TS/SCI)

Federal IT Consulting (FEDITC); Indianapolis (IN); On-site; USD 140,000 - 200,000; Full time

Job summary

FEDITC, LLC is seeking a CSSP Analysis, SME to lead 24/7 cybersecurity analysis, threat monitoring, and incident response for the DFAS CSSP program. Requires active Top Secret/SCI clearance and US citizenship.

On-site presence at the designated location in the United States is required. Responsibilities include leading staff, real-time SIEM correlation, incident handling, threat intelligence, and compliance with DoD reporting requirements.

Qualifications

• Minimum 10 years of cybersecurity analysis experience in DoD or Federal environments with increasing responsibility.
• Expert-level knowledge of security event analysis, threat correlation, and incident response methodologies.
• Demonstrated expertise with enterprise SIEM platforms (Splunk, ArcSight, Microsoft Sentinel).
• Experience with cyber incident handling per NIST 800-61 and DoD incident reporting requirements.
• Strong knowledge of threat intelligence, malware analysis, and forensic investigation techniques.
• Experience with vulnerability management programs (ACAS, Nessus) and penetration testing.
• In-depth understanding of NIST 800-53, DISA STIGs, and DoD cybersecurity frameworks.
• Knowledge of DoD CSSP requirements, evaluations, and JFHQ-DODIN reporting.
• Proven ability to lead security analysis teams in high-pressure 24/7 operational environments.
• Ability to support COOP exercises and emergency operations.

Responsibilities

• Lead and supervise CSSP Analysis staff delivering 24/7 security event monitoring, analysis, and incident response.
• Direct real-time security event correlation, threat detection, and analysis using SIEM platforms (Splunk, ArcSight, Microsoft Sentinel).
• Manage cyber security incident response including detection, containment, eradication, and recovery operations.
• Oversee threat intelligence integration, indicator of compromise (IOC) analysis, and threat hunting activities.
• Coordinate internal and external incident reporting per JFHQ-DODIN, Cyber Command, and DFAS requirements.
• Lead audit support, security assessments, and compliance validation activities.
• Direct vulnerability analysis, penetration testing coordination, and remediation tracking.
• Develop and maintain incident response plans, playbooks, and analysis procedures.
• Support CSSP program operations including accreditation documentation and scoring metric compliance.
• Coordinate with DFAS ISSM, security teams, and external stakeholders on security incidents and findings.
• Ensure 100% compliance with DoD CSSP Evaluators Scoring Metrics and reporting requirements.

Skills

SIEM expertise

Threat intelligence

Incident response

DoD/Federal environments

Vulnerability management

NIST SP 800-53

Education

BA/BS Degree

Tools

Splunk

ArcSight

Microsoft Sentinel

ACAS

Nessus

Job description

FEDITC, LLC is seeking a CSSP Analysis, SME to lead 24/7 cybersecurity analysis, threat monitoring, and incident response for the DFAS CSSP program. Requires active Top Secret/SCI clearance and US citizenship.

On-site presence at the designated location in the United States is required. Responsibilities include leading staff, real-time SIEM correlation, incident handling, threat intelligence, and compliance with DoD reporting requirements.