Cyber Security Analyst & Engineer (Multiple Openings)

Cyber Intelligence Analyst
Clearance: TS/SCI
Salary: $97K
Major Duties & Responsibilities
Cyber Threat Analysis & Intelligence
1. Analyze cyber intelligence reports to determine correlation and applicability to network operations on AFCENT networks.
2. Analyze network intrusion detection reports and vulnerability assessments to evaluate security posture as it pertains to current operations and information security levels.
3. Recommend security posture changes based on security analysis and changes in threat indicators.
4. Develop threat profiles to increase visibility of known bad actors and use that information to create signatures for detection.
Security Monitoring & Incident Reporting
1. Track, document, and report all security-related events, including, but not limited to, Discharge of Classified Information and Cross Domain Violations IAW USCENTCOM/AFCENT policy.
2. Coordinate and track Information Assurance Vulnerability Alerts (IAVA).
Compliance & Risk Management
1. Review and report AFCENT compliance to USCENTCOM, and develop Plans, Objectives, Actions and Milestones (POA&M) if unable to complete task.
Training & Knowledge Transfer
1. Provide on-shift training to contractor and government personnel, including analysis interpretation and threat/event correlation.
Network Operations Support
1. Provide LAN/WAN support.

Qualifications
Education & Experience
• 5+ years experience in cyber and network operations.
• Bachelor’s degree in a related field.
• Additional years of experience may be substituted for degree requirements.
Required Certifications
• Must be Security+ certified.
• Must be Network+ certified.
• Must be Linux+ or RHCSA certified.
• Must hold the ITIL Foundations certification or be able to obtain the certification within 60 days of hire.
Technical Requirements
• Must have firewall and UNIX/Linux experience.
• Experience performing analysis of security, auditing procedures, and backup systems to thwart adversary penetration.
• Experience evaluating an adversary's network profile, including:
○ Physical location of assets
○ Architectures
○ Security policies
○ Baseline activity
○ Peculiarities and vulnerabilities
○ Capabilities
• Able to assess information gaps and predict areas of information that enhance the collection cycle, based on collection strategies.
• Experience establishing policy to ensure intelligence threat inputs and intelligence supportability requirements are considered and integrated into market research and other research and development efforts.
Professional Skills
• Able to communicate complex programmatic cybersecurity planning information and elicit understanding and support from professional peers and non-specialists.
Clearance Requirement
• Must be a U.S. Citizen.
• Must hold a current Top Secret clearance with SCI access (TS/SCI).

Cyber Security Analyst
Clearance: TS/SCI
Salary: $114K
Major Duties & Responsibilities
Cyber Threat Detection & Incident Analysis
1. Analyze network intrusion detection systems and conduct vulnerability assessments.
2. Develop methods to detect and prevent intrusive activities utilizing knowledge.
3. Assist in developing countermeasures to isolate, contain and prevent intrusive activities and secure systems.
4. Develop methods to identify, contain, log, and analyze intrusive activities and security vulnerabilities on AFCENT networks.
Security Monitoring & Cyber Defense Operations
1. Conduct network security monitoring and intrusion detection analysis using the AFCENT/USCENTCOM selected security tools to include but is not limited to IDS/IPS, firewall, proxy, router, Fidelis, Trellix, and LogRhythm logs.
2. Install, configure, maintain, and manage the AFCENT/USCENTCOM security devices to include but is not limited to IDS/IPS, ESS/HBSS, and forensic tools.
3. Analyze network firewall and computer network server (DNS, proxy, domain controller, file server, Active Directory) logs.
Automation & Scripting
1. Write and develop custom scripts as needed to perform tasks related to all Cybersecurity toolsets, such as custom parsers and responses.
Documentation & Process Development
1. Assist in development and documentation of sensor process and checklists.
Network Operations Support
1. Provide LAN/WAN support.

Qualifications
Education & Experience
• 5+ years experience in cyber security.
• Bachelor’s degree in a related field.
• Additional years of experience may be substituted for degree requirements.
Required Certifications
• Must be CISSP certified.
• Must be Network+ or CCNA certified.
• Must hold the ITIL Foundations certification or be able to obtain the certification within 60 days of hire.
Technical Requirements
• Must have firewall experience.
• Experience with intrusion detection and vulnerability assessments.
• Strong knowledge of Microsoft Windows technologies, including:
○ Active Directory
○ Windows Administration
○ Scripting
○ Windows configuration techniques
• Linux experience to include:
○ Red Hat
○ Fedora
• Networking experience including:
○ Routers
○ Switches
○ Firewalls
• Experience with:
○ Cisco
○ Juniper
• Experience working with security monitoring and analysis tools including:
○ IDS/IPS
○ ESS/HBSS
○ Fidelis
○ Trellix
○ LogRhythm
○ Forensic tools
Professional Skills
• Must be detail oriented and possess the ability to work in a multi-disciplined environment with an adaptive personality.
• Strong analytical and communication skills.
• Must be a team player able to work professionally and collaboratively with the government customer and other contract members of the project team.
Availability & Travel Requirements
• Must be able to provide support in a 24/7/365 environment, including occasionally covering shifts outside of the assigned shift and/or providing after-hours, weekend, or holiday support as needed on a rotational basis.
• Must be able to travel to CONUS sites to provide TDY support.
Clearance Requirement
• Must be a U.S. Citizen.
• Must hold a current Top Secret clearance with SCI access (TS/SCI).

Cyber Security Engineer
Clearance: Secret
Salary: $97K
Major Duties & Responsibilities
Security Tools Administration & Management
1. Install, configure, maintain, and manage the AFCENT/USCENTCOM security devices to include but is not limited to:
○ IDS/IPS
○ LogRhythm Enterprise Security Manager
○ ACAS
○ End-Point Security Systems (ESS)/Host-Based Security Systems (HBSS)
○ Associated Virtual Private Network (VPN) equipment/configurations
2. Maintain ESS/HBSS and all related DISA mandated point products.
3. Conduct network security monitoring and intrusion detection analysis using the AFCENT/USCENTCOM selected security tools, including but not limited to:
○ IDS/IPS
○ Firewalls
○ Proxy
○ Router
○ ESM
○ Logger
○ Fidelis
○ HBSS
○ LogRhythm logs
Cybersecurity Engineering & Incident Response
1. Develop methods to detect and prevent intrusive activities utilizing knowledge.
2. Assist in developing countermeasures to isolate, contain, and prevent intrusive activities and secure systems.
3. Maintain current knowledge on new vulnerabilities and exploits.
4. Develop system concepts of operations and engineering plans to execute security requirements for new and existing systems with a focus on incident response policies and procedures.
Network Security Operations
1. Provide technical advice and assistance to the AFCENT NOSC-Cybersecurity team to resolve network issues and perform actions necessary to ensure IDS/IPS sensors are collecting and reporting network activity.
2. Conduct troubleshooting and fault isolation to ensure network connectivity to the sensor equipment.
3. Build tactical and strategic network profiles of specific systems and complete network architecture.
4. Develop reports and trend analysis documentation on bandwidth, network architecture, and network security incidents.
End User Support & Compliance
1. Diagnose and resolve end-user problems.
2. Ensure end users adhere to proper security policies and procedures.
Documentation & Process Development
1. Assist in the development and documentation of sensor processes and checklists.
Network Operations Support
1. Provide LAN/WAN support.

Qualifications
Education & Experience
• 3+ years of cybersecurity experience.
• Associate’s degree in a related field.
• Additional years of experience may be substituted for degree requirements.
Required Certifications
• Must be Security+ certified.
• Must be Network+ or CCNA certified.
• Must hold the ITIL Foundations certification or be able to obtain the certification within 60 days of hire.
Cybersecurity & Compliance Knowledge
• Familiar with:
○ DIACAP
○ Risk Management Framework (RMF)
○ STIGs
○ IA Controls
Technical Requirements
• Experience with development/architecture for applications and services, testing, and administration.
• Strong knowledge of Microsoft Windows technologies, including:
○ Active Directory
○ Windows Administration
○ Scripting
○ Windows configuration techniques
• Linux experience including:
○ Red Hat
○ Fedora
• Networking experience including:
○ Routers
○ Switches
○ Web proxies
○ Firewalls
• Experience with:
○ Cisco
○ Juniper
○ SIEM
○ IDS/IPS
○ EDR
○ ENS (Trellix)
○ ACAS
Professional Skills
• Must be detail oriented and possess the ability to work in a multi-disciplined environment with an adaptive personality.
• Strong analytical and communication skills.
• Must be able to apply intensive and diverse knowledge to problems and make independent decisions.
• Must be a team player able to work professionally and collaboratively with the government customer and other contract members of the project team.
Availability & Travel Requirements
• Must be able to provide support in a 24/7/365 environment, including occasionally providing after-hours, weekend, or holiday support as needed on a rotational basis.
• Must be able to travel to CONUS sites to provide TDY support.
Clearance Requirement
• Must be a U.S. Citizen.
• Must hold a current Secret clearance.

Counter Access Analyst
Clearance: Secret
Salary: $101K
Major Duties & Responsibilities
Cyber Threat Hunting & Defensive Cyber Operations
1. Build tactical and strategic network profiles for specific systems and complete network architecture.
2. Proactively conduct cyber hunt activities, search through systems and networks to detect advanced threats, and monitor network traffic to determine system vulnerabilities and required fixes.
3. Apply established network security procedures, log and make recommendations for correcting network security incidents, and coordinate the escalation of security issues requiring detailed analysis to Cybersecurity Analysts.
4. Proactively analyze AFCENT network IDS and IPS for evidence of malicious cyber activity and conduct Defensive Cyber Operations (DCO) missions to eliminate identified threats.
5. Conduct threat emulation testing and develop and deploy advanced threat mitigation strategies in response to test results.
6. Develop and deploy countermeasures (to include IDS/IPS signature developments and correlation rule sets) to isolate, contain, and prevent intrusive activities and secure AFCENT/CENTCOM networks.
Security Monitoring & Analysis
1. Utilize network intrusion devices and available cyber defense infrastructure, including but not limited to:
○ Endpoint Security Systems
○ Intrusion Detection and Prevention Systems (IDS/IPS)
○ Proxy security appliances
○ Forensics tools
○ Other security agents
to minimize threats to AFCENT networks.
2. Monitor network traffic to determine system vulnerabilities and required fixes; apply established network security procedures, log and make recommendations for correcting network security incidents; and coordinate the escalation of security issues requiring detailed analysis to Security Analysts.
3. Utilize network intrusion and available cyber defense infrastructure, including but not limited to:
○ Endpoint Security Systems
○ IDS/IPS
○ Proxy security appliances
○ Forensics tools
○ Other security agents
to minimize threats to AFCENT networks.
4. Examine logs and information gained from network sniffers or protocol analyzers to determine if possible unauthorized access has occurred.
Digital Forensics & Incident Response
1. Conduct network and computer forensics on suspected and confirmed compromised systems to determine the method of intrusion and corrective actions to be taken to prevent or detect similar future activities.
2. Conduct thorough forensic investigations on security incidents, including data breaches and system compromises.
3. Collect, preserve, and analyze digital evidence following established procedures to support incident investigations.
4. Perform network traffic and host analysis to evaluate intruder activities using host and network-based monitoring systems.
5. Identify, track, and record suspected intrusions or actual security breaches and detail analyses in written reports for legal use.
Vulnerability Management & Coordination
1. Coordinate with other Counter Access Team (CAT) and Vulnerability Management (VM) teams to ensure the latest known vulnerabilities are properly identified and corrected.
Training & Knowledge Transfer
1. Assist with analyst training in advanced traffic analysis, incident response, and cyber hunt activities.

Qualifications
Education & Experience
• 5+ years experience in network and cyber security.
• Bachelor’s degree in a related field.
• Additional years of experience may be substituted for degree requirements.
Required Certifications
• Must be Security+ certified.
• Must be Network+ or CCNA certified.
• Must hold the ITIL Foundations certification or be able to obtain the certification within 60 days of hire.
Technical Requirements
• Must have firewall experience.
• Experience with intrusion detection and vulnerability assessments.
• Networking experience including:
○ Routers
○ Switches
• Able to deeply understand threat profiles and create custom rules to detect and uncover methods used by malicious actors.
• Able to build complex network profiles from cyber intelligence-provided information for hunting the adversary.
• Must possess the ability to conduct network and/or host forensics during an incident.
• Able to maintain current knowledge on:
○ New vulnerabilities and exploits
○ Malware behavior and propagation characteristics
○ Anti-virus tools
Professional Skills
• Must be detail oriented and possess the ability to work in a multi-disciplined environment with an adaptive personality.
• Strong analytical and communication skills.
• Must be a team player able to work professionally and collaboratively with the government customer and other contract members of the project team.
Clearance Requirement
• Must be a U.S. Citizen.
• Must hold a current Secret clearance.