Cyber IT Specialist

Ensure successful pass down of information to the oncoming shift to maintain seamless operations and continuity. \n

Complete Task List Reports, clearly documenting all shift activities, incidents, and operational events. \n

Monitor personnel activity, alerts, and DSCTS-Operations mailboxes to ensure timely communication and response to operational needs. \n

Monitor Splunk dashboards, SolarWinds, and other enterprise tools, and promptly notify the Shift Lead of identified issues. \n

Oversee the performance and security of monitoring tools to maintain system functionality and data integrity. \n

Create, update, and audit ServiceNow tickets (incidents, service tasks, and requests) to ensure accurate tracking, documentation, and resolution. \n

Perform initial triage, troubleshooting, and resolution of incidents and service requests to restore normal operations. \n

Document troubleshooting steps, actions taken, and service restoration details within ServiceNow for accurate record-keeping and knowledge sharing. \n

Verify incident resolution with end users and ensure proper ticket closure and documentation. \n

Escalate unresolved or complex incidents to appropriate teams (e.g., System Administration, NSS, or external vendors) \n

Initiate and coordinate Major Incident Response Plan (MIRP) activities, including bridge line setup, stakeholder notifications, and incident tracking. \n

Coordinate with cross-functional teams to troubleshoot and resolve outages, minimizing operational disruption. \n

Maintain and utilize escalation paths, call lists, and contact rosters to ensure rapid engagement of supporting teams. \n

Conduct investigations and diagnosis of outages, incidents, and service requests using enterprise tools, vendor resources, and open-source research. \n

Perform trend analysis to identify recurring issues and support proactive problem resolution. \n

Conduct root cause analysis in coordination with responsible teams and support updates to documentation and process improvements. \n

Create and submit knowledge articles to support continuous improvement and knowledge transfer. \n

Participate in disaster recovery processes to support business continuity during major system failures. \n

Perform quality checks on tickets, reports, and deliverables to ensure accuracy, completeness, and proper categorization prior to submission. \n

Support asset management activities, including receiving, inventorying, and tracking hardware shipments at BIMC (SA-26). \n

Coordinate and facilitate shipment of hardware components (e.g., RAM, PSUs, HDDs) to CONUS & OCONUS sites, ensuring proper documentation and accountability. \n

A Bachelor’s degree and 2 years of experience. An additional 4 years of experience may be substituted in lieu of the bachlor’s degree requirement. \n

Demonstrated 1+ years in IT operations, network operations, or a cybersecurity support role experience. \n

Must either possess and maintain, or obtain prior to start date, one of the following professional certifications: \n

CASP+ CE, CCNA-Security, CISSP (or Associate), CND, CSSLP, CySA+, GICSP, GSEC, Security+ CE, SSCP \n

Experience with ServiceNow or similar ITSM tools for incident and request management. \n

Familiarity with monitoring tools such as Splunk, SolarWinds, or similar platforms. \n

Understanding of incident response processes, including severity classification and escalation procedures. \n

Strong analytical and troubleshooting skills with the ability to operate in a fast-paced environment. \n

Demonstrated strong communication skills with the ability to provide clear and timely updates. \n

U.S. Citizenship required. \n

The ability to obtain an interim Secret security clearance before start date. \n

The ability to obtain a final Top Secret security clearance.