nCyber Fusion and Threats Analyst

• Bachelor’s degree with 8+ years of professional experience (related DISA experience and cyber courses/certification is accepted in lieu of a degree.)\n
• Must have DoD-8140 IAT Level 2 baseline certification (Security+ CE or higher) at start date.\n
• Proficient understanding of Cyber Network Defense (CND) in regards to protect, detect, respond and sustain within a Computer Incident Response organization.\n
• Excellent verbal and written communication skills including the ability to clearly articulate technical and strategic level cyber matters to a variety of audiences.\n
• Highly developed research and analytical skills to pinpoint statistically significant patterns related to cyber threats.\n
• Understanding of TCP/IP, common networking ports and protocols, traffic flow, system administration, OSI model, defense-in-depth.\n
• Must have an active Top Secret/SCI clearance.\n, * Knowledgeable in Cloud security/defense.\n
• Experience with DISA and DoD Networks.\n
• Working knowledge of cyber operational security, log analysis, netflow analysis, incident response, malware analysis, computer forensics, and/or cyber-crime.\n
• Advanced Certifications such as SANS GIAC/GCIA/GCIH, CISSP or CASP.\n
• Demonstrated experience briefing Senior Executive Service (SES) and General Officer/Flag Officer (GO/FO) leadership.\n
• Working knowledge and proficiency utilizing Wireshark and Splunk analysis tools.\n
• Experience in intelligence driven defense and/or Cyber Kill Chain (CKC) methodology; knowledge of Advanced Persistent Threat (APT) and other cyber threat modeling frame works.\n
• Working knowledge of the U.S. Intelligence Community and/or Fusion centers.\n

GSM-O II provides network operations and cyber defense support to the Defense Information Systems Agency (DISA) in support of the Department of War (DoW) and Combatant Commands (CoCOMs).\n \n \nPRIMARY RESPONSIBILITIES:\n \n \n

• Maintain situational awareness of cyber activity by reviewing DoD, Intelligence Community and open source reporting for new vulnerabilities, malware or other threats that have the potential to impact the DoDIN.\n
• Support mission-critical Continuity of Operations (COOP).\n
• Synthesize, summarize, consolidate and share potentially malicious activities on the DoDIN with DISA and mission partner organizations by creating incident reports, wiki updates, collaboration/chat tippers and notifications, DoD incident handling database queries, metrics, and trend reports.\n
• Assist in providing threat and vulnerability analysis as well as security advisory services and recommendations.\n
• Train and mentor other team members.\n