Posted today
Secret
Early Career (2+ yrs experience)
Unspecified
Occasional travel
IT - Security
Pearl Harbor, HI (On-Site/Office)
BreakPoint Labs seeks a Tier 1 Defensive Cyber Operations (DCO) Analyst to be responsible for the continuous monitoring and initial triage of security events within a Cybersecurity Service Provider (CSSP) environment. Work takes place on four ten-hour shifts (Sunday-Wednesday or Wednesday – Saturday).
Responsibilities include:
- Monitor network and host-based systems.
- Identify and validate of suspicious activities.
- Escalate security incidents as required.
- Provide support for foundational incident response procedures.
- Comply with established reporting requirements with accuracy and timelines.
- Assist in managing incident response by documenting and tracking details.
- Participate in training to develop familiarity with tools and processes.
- Support log correlation tasks using tools like Splunk, Elastic, and Sentinel.
- Assist in program reviews and product evaluations as directed
- Surge support may be required to support incident response actions.
Required Experience:
- 3+ years of experience working in CSSP, SOC, or similar environment, OR, Bachelor’s degree in relevant technical field.
- Must have DoD 8570 IAT Level II and CSSP-specific certifications.
- Experience with Log Aggregation Tools (e.g., Splunk, Elastic, Sentinel) preferred.
- Experience with IDS/IPS, host-based, and operating system logging solutions.
- Knowledge of Incident Response methodologies and procedures strongly preferred.
- Experience with digital forensics, threat hunting, and/or incident response desired.
- Familiarity with CJCSM 6510.01B.
- Analytical ability and strong verbal and written communication skills required.
Certifications Required: DoD 8570 IAT Level II and CSSP-specific certifications, CND.
Clearance Required: DoD Secret
Education Level required: Bachelor’s Degree Area(s) of Study Relevant technical discipline or 3+ years equivalent experience
Responsibilities include:
- Monitor network and host-based systems.
- Identify and validate of suspicious activities.
- Escalate security incidents as required.
- Provide support for foundational incident response procedures.
- Comply with established reporting requirements with accuracy and timelines.
- Assist in managing incident response by documenting and tracking details.
- Participate in training to develop familiarity with tools and processes.
- Support log correlation tasks using tools like Splunk, Elastic, and Sentinel.
- Assist in program reviews and product evaluations as directed
- Surge support may be required to support incident response actions.
Required Experience:
- 3+ years of experience working in CSSP, SOC, or similar environment, OR, Bachelor’s degree in relevant technical field.
- Must have DoD 8570 IAT Level II and CSSP-specific certifications.
- Experience with Log Aggregation Tools (e.g., Splunk, Elastic, Sentinel) preferred.
- Experience with IDS/IPS, host-based, and operating system logging solutions.
- Knowledge of Incident Response methodologies and procedures strongly preferred.
- Experience with digital forensics, threat hunting, and/or incident response desired.
- Familiarity with CJCSM 6510.01B.
- Analytical ability and strong verbal and written communication skills required.
Certifications Required: DoD 8570 IAT Level II and CSSP-specific certifications, CND.
Clearance Required: DoD Secret
Education Level required: Bachelor’s Degree Area(s) of Study Relevant technical discipline or 3+ years equivalent experience
group id: 90987816
