Cyber Defense Incident Responder (CDIR) - Ft. Greely, Alaska Davidson is seeking a **Cyber Defense Incident Responder (CDIR) in Fort Greely, Alaska.** As a CDIR Operator, the successful candidate will utilize the Cyber Security Manager (CSM) toolkit to monitor network logs and message traffic between all elements on the GMD Communication Network (GCN) and elevate alerts via proper channels/protocols. The contingent position(s) are in Fort Greely, Alaska (FGA), and/or Schriever SFB, Colorado (SSFB) and is a permanent position, rotating schedules may be required (no differential pay for shift work, no housing, or cars offered). **Job Responsibilities:** - Monitor all mission network traffic - Provide 24-hours a day, 7-days a week, 365 days a year (24/7/365) capability to detect network attacks to GMD network communications. CDIR operators will be expected to work any/all shifts. Standard operations are on 10-hour shifts but may switch to 8-hour or 12-hour schedule based on team availability, mission requirements, or Prime directives. - Support Information Assurance/Computer Network Defense Analysts for monitoring and analysis. - Support monitoring of systems, servers, infrastructure, and software, to include firewalls, proxy servers, and intrusion detection systems. - Review system and firewall logs and IDS alerts using approved tools and in accordance with operating procedures. - Participate, when needed, with the incident response team in a technical hands-on role to support investigation, response, resolution identification, and root cause analysis. - Recommend and implement additional controls to prevent future incidents. - Support other teams by responding to requests for more information and assisting with specific projects. - Provide inputs to the respective operations work schedule. - Provide weekly status reports. - Attend daily/weekly/monthly support meetings, as requested. - Complete required CSM training, system familiarization, safety and security at the designated facility **Job Requirements:** - DOD 8140 Compliance Certification for (531) Cyber Defense Incident Responder: - CBROPS or FITSP-O or GISF or CCSP or CEH or Cloud+ or GCED or PenTest+ or Security+ or GSEC - Ability to read, understand and execute defined engineering procedures **Desired Competencies:** - CySA+ or CFR or GCFA or GCIA or GDSA or GCIH or GICSP or CCE - Familiarity with cyber network defense tools (i.e., Splunk, WAZUH, etc.) - Knowledge of DOD Communication Network Architectures and Network Operations Center (NOC) documentation and processes **Clearance:** - Must be a U.S. citizen - Must already possess a Secret Clearance and the ability to obtain Top-Secret if required