Cybersecurity Operations Technical Lead 131-001

IC-CAP is seeking a Cybersecurity Operations Technical Lead to serve as the contractor's lead to the Government for Technical Information and Analysis Operations supporting the USTRANSCOM Cybersecurity Service Provider (CSSP) at Scott AFB, IL. This key position leads elevated incident management and analysis, directs cyber investigations in accordance with USTRANSCOM and USCYBERCOM policy, and provides direct analytical support to the CSSP on cyber incidents and events, cybersecurity solutions, strategic defensive posture, and adversary methodology and tactics. The Technical Lead is the senior technical authority linking intrusion detection, cyber threat analysis, and analytic development, and works closely with the Command's intelligence community, cyber operational forces, DIA, NSA, and counterpart CSSPs.

Duties may include:

• Function as technical lead for identified USTRANSCOM cyber incidents/events or at the direction of the Government
• Execute cyber investigations IAW USTRANSCOM/USCYBERCOM policy
• Provide analytical support to Intrusion Detection Monitoring & Incident Management and Cyber Threat Analysis
• Provide technical support to developing/maintaining CSSP cybersecurity tool suites, including analytic development, gap analysis and optimization
• Gather, analyze and correlate cybersecurity events in the mission environment, including systems for which USTRANSCOM is the AO
• Collaborate with the Command's intelligence community and cyber operational forces
• Maintain awareness of active threat actors; predict threat trends; highlight effects on system performance and mission capability
• Receive and process warning intelligence from DIA, NSA, counterpart CSSPs and open sources, maintaining source location information
• Support development of threat awareness products, monthly cyber threat briefings for CSSP leadership, and SOPs

Education and Experience

Required:

• Bachelor's in Cybersecurity, Computer Science, Information Systems or related (Master's preferred) -OR- 4 additional years of relevant experience in lieu of degree
• Minimum 10 years IA/cybersecurity experience, with at least 5 years in cybersecurity incident analysis and response
• Minimum 5 years cyber threat analysis experience
• Documented experience leading cyber investigations for a recognized DoD entity (DoD CSSP, DISA, Service NOSC or equivalent, LE/CI, or CCMD)
• Documented experience collaborating with the DoD Intelligence Community
• NIST and DoD security policies, directives and guidelines
• Zero Trust architecture and design (authentication, authorization, least privilege, micro-segmentation, SOAR, PAM)
• Securing virtualization/cloud infrastructure
• Auditing (system accounts, security logs, system and network anomalies)
• Cybersecurity metrics capture and documentation
• Network architecture and design (security stack; production/test/dev/DMZ enclaves)
• Border device security (firewall, HTTP proxy, WAF, VLANs, IP subnetting, ports/protocols)
• Current Microsoft server/workstation, Red Hat Enterprise Linux and Unix security configurations
• Virtualization security
• Encryption standards

Certifications:

• CISSP or CASP+/SecurityX
• GCIH or GCFA
• GCTI (preferred)

Security Clearance:

• Active TS/SCI Clearance and the willingness to sit for a CI polygraph, if needed

IC-CAP provides equal employment opportunities (EEO) to all applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status.