OverviewJob Summary:Responsible for cybersecurity operations, incident response, and defensive cyber measures across both centralized and distributed locations in support of the Warfighter Training Readiness Solutions (W-TRS) program under the U.S. Army PEO STRI. The role involves continuous 24x7x365 monitoring, analysis, and response to cyber threats, ensuring adherence to best practices and operational procedures for defensive cyber operations.
The analyst proactively implements defense strategies, maintains compliance and reporting metrics, and ensures alignment with DoD cybersecurity policies. Additionally, they generate reports related to FISMA, RMF ConMon, and security incidents while operating, maintaining, and deploying enterprise cyber tools.
Responsibilities- Create and maintain RMF / cybersecurity documentation per DoDI 8510 and AR 25-2
- Operate workstations and turn collected data into useful security information
- Respond to security incidents, write and submit incident reports
- Validate IAVAs with vulnerability scans for all supported baselines
- Maintain and secure current and future system baselines and configs
- Continuously monitor and test for security compliance
- Use SIEM tools to analyze and correlate audit and event logs
- Review security requirements, perform testing, and support RMF A&A/ATO
- Monitor and control external communications and block unauthorized software/mobile code
- Immediately report unauthorized network services to IA personnel
- Configure and enable required security features
- Centralize, review, and store audit records; perform regular audit reviews
- Manage user accounts and ensure weekly audit log backups
- Support annual FISMA activities tied to A&A and ATO requirements
- Monitor systems 24/7/365 for suspicious activity
- Analyze alerts and respond to cyber incidents
- Follow and apply DoD cybersecurity policies and best practices
- Put defensive measures in place to prevent attacks
- Keep systems compliant and track key security metrics
- Create required security reports (e.g., FISMA, RMF Continuous Monitoring, incident reports)
- Operate, maintain, and deploy enterprise cybersecurity tools across both central and remote locations
QualificationsQualifications:- Hands-on experience in cybersecurity operations (protect, detect, respond, sustain)
- Strong technical skills in current and emerging cybersecurity technologies
- Understands the full lifecycle of cyber threats and related TTPs
- Strong written and verbal communication; able to produce clear technical reports
Desired Qualifications:- 3+ years of Incident handling experience
- Experience supporting DoD / U.S. Army / Federal Government
- Hands-on with: ACAS, Splunk, ESS, Cisco ASA Firewalls & Firepower IPS, SRGs, STIGs, DISA STIG Viewer, SCC/SCAP, Evaluate STIG, Windows, and RHEL Linux
- Prior experience as a SOC Analyst I or similar cyber role within a CSSP environment
Degree & Experience:- No Degree and 6 years Relevant Experinece in Cybersecurity and Information Assurance.
- Associates Degee and 4 years Relevant Experinece in Cybersecurity and Information Assurance.
- B.S. Degree and 2 years Relevant Experience in Cybersecurity and Information Assurance
- Masters Degree and 1 years Relevant Experience
Certifications:- Security+ Certification Required
- Desired Certification: 8140/8570 DoD Certification; Foundation-Intermediate (511-Cyber Defense Analyst) / Information Assurance Technician LV II (IE: CYSA+, etc.)
Location:Orlando, Florida
Clearance:Active Secret Clearance
