Space Cyber Defense Lead (DCO SME)

Quantum Sky; Colorado Springs (CO); On-site; USD 120,000 - 160,000; Full time

Job summary

Quantum Sky is seeking a Defensive Cyber Operations (DCO) SME to support the US Space Force's SPICES contract. The role focuses on intrusion detection, threat analysis, and developing defensive measures to improve squadron readiness and mission assurance across space mission systems.

The position requires active DoD CSSP Analyst or Incident Responder certification, 8+ years of relevant cyber experience, and strong experience with SIEM, IDS/IPS, and ELK stack.

Qualifications

• Active DoD 8570.07-M CSSP Analyst or Incident Responder certifications.
• CEH, CySA+, GCIH, GCIA, CFR, CCNA Cyber Ops, CCNA-Security, GICSP, Cloud+, SCYBER, PenTest+, CHFI or GCFA.
• Eight (8)+ years of relevant cybersecurity experience.
• Experience with Cybersecurity Monitoring, Intrusion Detection and Incident Response.
• Experience performing Continuous Cybersecurity Monitoring, Intrusion Detection and Cyber Incident Response.
• Proficiency with ELK Stack, Kibana, Suricata, Splunk, Snort, Wireshark, Zeek, tcpdump, LogRhythm, ePO/HBSS, ACAS, SolarWinds, Microsoft 365, AD WMIC commands.
• CSSP experience is preferred.
• Familiarity with Space Operations.
• IAT III certification required; qualifying certifications include CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP.

Responsibilities

• Develop operational and technical materials to aid in increasing proficiency of the crews.
• Provide cyber defense remediation and mitigation implementation recommendations in support of all incidents/events.
• Provide support for Operational Planning Teams (OPTs) and crew shift planning processes; participate in planning, recommend COAs, validate the technical approach to meet mission objectives.
• Draft and validate DCO TTPs; SOPs; OIs; and DCO Crew operations materials and related products.
• Analyze new DCO-Space capability releases to assess new functionality for mission execution.
• Attend meetings and VTCs at Unclassified, Secret, and TS/SCI levels as required.
• Provide recommendations for exercises and mission rehearsals.
• Maintain proficiency by performing DCO crew operations for space mission systems.
• Provide expertise for DCO-Space capabilities including SIEM, IDS/IPS, ELK Stack, SOAR, firewalls, endpoints, and related tooling.
• Augment and advise crews performing intrusion detection monitoring and analysis.
• Review Cyber 9-Line inputs for SITREP and MISREP accuracy.
• Advise on cyber incident response processes per squadron policies.
• Support CIRTs and provide technical assistance to determine incident nature and impact.
• Create COAs and sequencing to mitigate threats to space mission systems.
• Participate in post-incident hot washes and lessons-learned processes.
• Recommend cyber incident response best practices to improve TTPs, processes, and policies.
• Offer recommendations to optimize DCO-Space capabilities and countermeasure development.

Skills

Cybersecurity Monitoring

Intrusion Detection

Cyber Incident Response

DoD CSSP Analyst

DoD CSSP Incident Responder

Cybersecurity Experience (6+ yrs)

Cybersecurity Experience (8+ yrs)

Education

CSSP Analyst Certification

IAT Level III Certification

8+ years Cybersecurity experience

Tools

ELK Stack

Kibana

Suricata

Splunk

Snort

Wireshark

Zeek

tcpdump

LogRhythm

ACAS

SolarWinds

Microsoft Office 365

Active Directory WMIC

Job description

Quantum Sky is seeking a Defensive Cyber Operations (DCO) SME to support the US Space Force's SPICES contract. The role focuses on intrusion detection, threat analysis, and developing defensive measures to improve squadron readiness and mission assurance across space mission systems.

The position requires active DoD CSSP Analyst or Incident Responder certification, 8+ years of relevant cyber experience, and strong experience with SIEM, IDS/IPS, and ELK stack.