5-7 years of experience in network security analysis and cyber defense roles
Strong technical background in configuring and securing routers, switches, and firewalls
Familiarity with interpreting network diagrams and scanning software
Experience in incident response and threat mitigation within cybersecurity
Ability to obtain and maintain Top Secret security clearance including Sensitive Compartmented Information (SCI)
Knowledge of Department of Defense (DoD) cybersecurity policies and practices
Certification compliant with Cyber Workforce Management Program within six months of hire
Responsibilities
Monitor network security for the U.S. Army Cyber Protection Team
Analyze and configure network devices and operating systems for security enhancement
Provide technical support for cyber defense incidents across various networks
Create actionable network diagrams for Cyber Protection missions
Evaluate network traffic to identify malicious activity
Advise on cybersecurity issues impacting the Department of Defense network
Develop incident response strategies and threat mitigation measures
Benefits
Potential for alternative work schedules including 24/7 rotation
Opportunities for temporary duty travel (TDY) both CONUS and OCONUS
Training and certification opportunities as required by Cyber Workforce Management Program
Mission essential role requiring immediate response in emergencies or crises
Job placement within a prestigious Cyber Protection Team at an esteemed military facility
Full Job Description
Job Description:
Duties
Serve as a Network Analyst on a U.S Army Cyber Protection Team (CPT) in the U.S. Army Cyber Protection Brigade (CPB) monitoring network security to enable cyber security operations.
Analyze network architecture by installing, operating, maintaining, configuring, testing, and securing hardware and software-based routers, switches, firewalls, and various operating systems to enable network hardening recommendations.
Provide expert technical support to enterprise-wide and local network technicians to identify and resolve cyber defense incidents.
Interpret provided network diagrams, run local scanning software, and encompass sensor related data to create logical, physical, and persona-based diagrams utilized by the Cyber Protection Team during missions.
Survey and evaluate network traffic, identify baselines to facilitate locating adverse network trends, anomalous traffic, or malicious cyberspace activity (MCA).
Provide technical advice, guidance, and assistance on a wide range of complex cybersecurity issues and distribute information pertaining to cyber related threats impacting the Department of Defense Information Network (DoDIN).
Develop Army and Department of Defense incident response and threat mitigation countermeasures, friendly network forces prioritization, and operational assessments.
Defend and clear critical assets, Mission Relevant Terrain (MRT) or Key Terrain Cyber (KT-C) either remotely or by deploying to the affected location as needed.
Coordinate with network owners, local network defenders, and Cyber Security Service Providers (CSSP) to develop methods for the timely and accurate reporting and implementation of defensive countermeasures.
Assess the effectiveness of clearing and hardening actions by replicating threat intrusion actions to ensure vulnerabilities were mitigated.
Attend meetings, video teleconferences, and working groups, which require routine and recurring access to Top Secret Sensitive Compartmented Information (SCI) materials, equipment, facilities, and programs. Requirements Conditions of Employment
Appointment may be subject to a suitability or fitness determination, as determined by a completed background investigation.
Incumbent must be able to obtain and maintain TOP SECRET eligibility with access to Sensitive Compartmented Information (SCI).
Appointment to this position is subject to a three-year probationary period unless the appointee has previously met the requirements.
Incumbent must successfully pass urinalysis screening for illegal drug use prior to appointment and periodically thereafter according to Army Regulation 600-85, Alcohol and Drug Abuse Prevention and Control Program.
Incumbent must undergo and successfully complete an initial and periodic Counter-Intelligence Polygraph (CI Poly) examination with No Deception Indicated (NDI).
This position is classified as information technology access level Information Technology- I (Privileged User) and Sensitivity Matrix for Top Secret/Sensitive Compartmented Information (SCI), Tier 5.
Duties of this position may entail alternative work schedules (AWS) such as variable or MAXIFLEX, including extended shifts; 24/7 rotating shifts, nights, weekends, and/or holidays as required.
Incumbent may be subject to recall for urgent situations and/or working extended overtime in response to surge situations.
Temporary duty travel (TDY) may be required up to 30% annually. Travel may be within the contiguous United States (CONUS) or outside the continental United States (OCONUS).
Incumbent may be subject to extended temporary duty travel (TDY) during crisis situations to perform mission essential functions as determined by management, which may include deployment, immunizations, passport, and related requirements.
Temporary duty travel (TDY) may occur at austere or hazardous locations depending on mission.
This position is considered "Mission Essential".
In the event of severe weather conditions or other such emergency type situations (natural or man-made disaster) the incumbent is required to report to work or remain at work as scheduled to support mission operations.
Incumbent may be required to carry a cellular telephone/Portable Electronic Device (PED) and maintain a working personal telephone at all times.
Incumbent is required to successfully complete all applicable preparation courses, training, and comply with the Career Management Field's training certification policy.
Incumbent must obtain and maintain Career Management Field's training certification policy for Army Job Qualification Record (JQR) Validation and Certification.
Incumbent must obtain and maintain appropriate certification compliance in accordance with Cyber Workforce Management Program (Department of Defense Directive 8140.01 and Department of Defense 8570.01-memorandum) within six months of hire.
Position is subject to situational or ad hoc telework. Telework agreement required.
This is a DoD Cyber Excepted Service (CES) personnel system position in the Excepted Service under 10 United States Code 1599f. Appointment to this position does not confer competitive status.
Qualifications This position is in the Professional Work Category at the Full Performance Work Level within the CES Occupational Structure.
