DESCRIPTION OF RESPONSIBILITIES :
- Consolidate different data sources into a single view used to assess the status of a specific threat on the network.
- Develop and / or maintain dashboards displaying specific DCO items of interest (i.e., top 10 attackers, top 10 destinations, top attack vector, etc.
and all active cyber incidents, in near real time to the Theater Operations COP (Common Operating Picture) display area and other areas within the RCCP facility and virtually.
- Maintain, update, test, and implement signatures and policies for each sensor managed by the RCC-P; changes must be approved through the established CCB process.
- Develop signatures and policies that include both network- and host-based sensors.
- Update as necessary to minimize false positives and validate for proper syntax.
- Conduct all development and testing on isolated networks.
- Document and conduct testing activity with plan procedures, results, and operational procedures as signatures are developed and / or updated.
- Update and validate plan at least annually. A signature test plan shall be developed.
- Engineer connections from security devices, security managers, and security platforms across the Theater to the RCC-P SIEM.
- Provide sensor and application management support to tactical edge customers and develop and maintain TTPs for doing so.
- Other duties as assigned by supervisor.
REQUIRED DEGREE / EDUCATION / CERTIFICATION :
- Bachelor of Science degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science.
- Must meet at least one of the following baseline certifications in lieu of education : GFACT, CEH, Cloud+, CySA+, PenTest+, SSCP, Security+, or GSEC
REQUIRED SKILLS AND EXPERIENCE :
- Knowledge of host / network access control mechanisms (e.g., access control list)
- Knowledge of incident response and handling methodologies.
- Knowledge of Intrusion Detection System (IDS) / Intrusion Prevention System (IPS) tools and applications.
- Knowledge of cyber defense policies, procedures, and regulations.
- Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).
- Must meet DoD 8140 Cyber Defense Infrastructure Support Specialist (521)
REQUIRED CITIZENSHIP AND CLEARANCE :
- Must be a U.S. Citizen.
- Minimum Secret clearance; must be TS eligible based on investigation type (T5).
The Alaka ina Foundation Family of Companies (FOCs) is a fast-growing government service provider. Employees enjoy competitive salaries.
Eligible full-time employees enjoy a 401K plan with company match; medical, dental, disability, and life insurance coverage;
tuition reimbursement; paid time off; and 11 paid holidays.
30+ days ago