SOC Defensive Cyber Operations (DCO) Analyst Jr.

ITI
Colorado Springs, CO, United States
about 2 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Starter
Experience required
0 years minimum
Compensation
$95,000.0 - $110,000.0
Working hours
Shift work
Job source

Tech stack

Bash Shell CompTIA Security+ Cyber Security Information Systems Elasticsearch Intrusion Detection and Prevention Python (Programming Language) Microsoft Office Comptia Pentest+ CE Logstash Security Information and Event Management Tcpdump
+10 more
Wireshark Snort (Software) Cyber Threat Analysis Firewalls (Computer Science) Information Technology Kibana Cyber Warfare Splunk Security Orchestration, Automation & Response Vulnerability Analysis

Job description

ITI Solutions seeks a SOC DCO Cyber Analyst to support cyber operations at Schriever SFB. The candidate must be willing to work 12-hour shifts on a fixed 4-on, 3-off, and 3-on, 4-off schedule, either day or night shift., * Analyze cyber incidents, correlate incident details, and formulate response actions

  • Provide recommendations on tuning and maximizing the capability of existing tools while suggesting additional tools to enhance capability
  • Monitor government-provided Defensive Cyber Operations (DCO) tools and systems
  • Conduct after-action processes to capture efforts taken to mitigate unauthorized actions
  • Participate in the development of DCO Tactics, Techniques, and Procedures (TTPs)
  • Assist in the development of DCO concept of operations, processes, and procedures
  • Identify security discrepancies and report security incidents
  • Provide expert research and analysis in support of expanding programs and areas of responsibility

Requirements

Do you have experience in Research?, Do you have a Bachelor’s degree?, Required Qualifications: (Must have one of the Foundational Qualification Options below):

Education: BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science, from an ABET-accredited or CAE-designated institution, Certifications: CEH, GFACT, GISF, Cloud+, GCED, PenTest+, Security+, GSEC, CySA+, CBROPS, CFR, FITSP-O, GCIA, GDSA, GICSP, or GCFA, * Prior Defensive Cyber Operations or Cyber Analyst experience

  • Prior Cybersecurity Service Provider (CSSP)/SOC experience
  • Familiarity with Space Operations is highly desired.
  • 0-3 years of CSSP/SOC Cyber Analyst type work experience in a DoD cybersecurity environment

Experience/Skills:

Experience performing Cyber Threat Hunting, Participating in cyber exercises, Cyber Incident Response, Intrusion Detection, and Continuous Cybersecurity Monitoring

Provide expertise for DCO-Space capabilities, to include Security Incident and Event Management (SIEM); Intrusion Detection and Prevention Systems; ELK (Elasticsearch, Logstash, and Kibana) Stack; Endpoint Protection Systems; Security Orchestration, Automation and Response (SOAR); Firewalls; Log Aggregator; Protocol Analyzers; Vulnerability Assessment Tools

Hands-on experience with the following tools:

Elastic Stack, Teleseer, Kibana, Suricata, Wireshark, Splunk, Snort, Carbon Black, Bro/Zeek logs, TCPdump, editcap, ACAS, Bash scripting, Python, or Microsoft Office 365

Clearance: Active TS/SCI clearance is required, Must be a United States Citizen and pass a background check

About the company

Maintain applicable security clearance(s) at the level required by the client and applicable certification(s) as required by DODM 8140.03 (Cyberspace Workforce Qualification and Management Program), and additional training as requested by and/or required by ITI Solutions, Inc.

ITI Solutions, Inc. is a fast-growing business that develops and tailors advanced Engineering, Cybersecurity, Information Technology, Intelligence Support, and Training Services to resolve our clients’ complex challenges and exceed delivery expectations.

You must create an Indeed account before continuing to the company website to apply

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

52 sec

Introduction to eBPF as a secure virtual machine

Ayesha Kaleem · WWC 2023

3:21 min

Deploying a primary Elasticsearch and Kibana cluster configuration

Philipp Krenn · WWC 2022

2:38 min

Establishing comprehensive monitoring and log management

Michael Eder +1 · LIVE

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

4:51 min

Executing simple full-text search queries using the Kibana interface

Derek Binkley · LIVE

1:45 min

Transitioning from software development to security roles

Stefania Chaplin · WWC 2022

Videos

See all

Related articles

See all