Tier 3 DCO Threat Hunter & IR Lead

BreakPoint Labs LLC; South Carolina; On-site; USD 110,000 - 140,000; Full time

Job summary

BreakPoint Labs LLC is seeking a Tier 3 DCO Watch Analyst to lead complex incident response, conduct proactive threat hunting, and enhance detection capabilities within a CSSP environment. The analyst coordinates with internal and external stakeholders, leads purple team exercises, and ensures strict compliance with CJCSM 6510.01B standards.

Responsibilities include directing incident response campaigns, refining detection mechanisms, performing forensic analysis, and mentoring junior analysts.

Qualifications

• 5+ years supporting CSSP or similar SOC role.
• Deep knowledge of CJCSM 6510.01B incident response procedures.
• Experience with IDS/IPS solutions and rule development.
• DoD 8570 IAT Level II certification and CSSP/CND certification.
• DoD Secret clearance and related security requirements.

Responsibilities

• Lead incident response efforts, including analysis, mitigation, and reporting of significant incidents per CJCSM 6510.01B.
• Manage incident response campaigns by developing strategies, coordinating multi-team efforts, and ensuring comprehensive resolution and reporting.
• Conduct proactive threat hunting to identify advanced threats and network vulnerabilities.
• Lead purple team exercises with red and blue teams to evaluate and enhance detection and response capabilities.
• Evaluate and refine detection mechanisms, including IDS/IPS signatures and log correlation rules.
• Perform digital forensics on Windows and other operating systems to support investigations.
• Coordinate with reporting agencies and subscriber sites for comprehensive incident analysis and reporting.
• Develop and maintain internal SOP documentation aligned with CJCSM 6510.01B.
• Provide 24/7 support for incident response and mentor junior analysts.

Skills

Incident response

Threat hunting

IDS/IPS expertise

Operational leadership

Education

Bachelor's degree in Cybersecurity / related field

Tools

IDS/IPS systems

Log correlation tools

Job description

BreakPoint Labs LLC is seeking a Tier 3 DCO Watch Analyst to lead complex incident response, conduct proactive threat hunting, and enhance detection capabilities within a CSSP environment. The analyst coordinates with internal and external stakeholders, leads purple team exercises, and ensures strict compliance with CJCSM 6510.01B standards.

Responsibilities include directing incident response campaigns, refining detection mechanisms, performing forensic analysis, and mentoring junior analysts.