Exploitation Analyst

Description

Tharros has an immediate opportunity to support the US Navy with operational test and evaluation support. The Exploitation Analyst will develop/oversee the development of detailed plans that are executed by the OPTEVFOR Red Team or other organizations supporting cyber OT&E events.

Additionally, this role functions as a subject matter expert in cyberspace operations and uses all available system documentation and intelligence sources to determine system access points and critical components to develop test objectives that are executed by a supporting red team. This position will identify capability gaps and review cyber test requirements for each system under test and research and coordinate with other DoD organizations, academia, private sector, and defense contractors on cyber capabilities and tools to meet the test requirements.

Responsibilities:

• HQ Tasks:
  
  
  • Serve as a OPTEVFOR 01D Exploitation Analyst supporting cyber survivability policy and process oversight to warfare divisions, and becoming proficient in, and following OPTEVFOR cyber T&E concept of operations, SOPs, policies, and guidance.
  • Support sustainment and updating of OPTEVFOR to conduct and instruct Cyber Survivability Test Planning course.
  • Attend OPTEVFOR required meetings in support of OT&E.
  • Inform 01D Future Operations Officer of any challenges and issues in a timely manner for resolution.
  • Maintain and participate in the development of 01D SOPs and OPTEVFOR Cyber test planning documents to include participation in and support of the CCB process.
• Pre-Test Planning:
  
  • Support the Future Operations Officer to determine overall test strategy and level of cyber OT&E for acquisition programs.
  • Support the Future Operations Officer in reviewing Test and Evaluation Master Plan (TEMP) (or other types of OT&E resourcing documents), Integrated Evaluation Framework (IEF), test plan or other test planning related documents to ensure adequate test strategies are established within OPTEVFOR policies and guidelines to include adjudication of related comments from stakeholders.
  • Support program specific T&E Integrated Product Team (IPT), cyber table tops and other internal or external events as assigned and non-program specific T&E IPTs, technical exchange meetings, and other briefs and meetings as required.
• Test Planning:
  
  
  • Develop cyber survivability test plans following OPTEVFOR Cyber OT&E procedures and templates and with minimal administrative errors.
  • Coordinate with the warfare divisions and red team operators to ensure defined test objectives are comprehensive and executable, data collection requirements are adequately defined, cyber test capabilities are identified, resourced, and integrated prior to the test plan being signed.
  • Attend test planning visits in support of cyber OT&E planning.
• Lead preparation of test execution, including:
  
  
  • Participate in site pre-test coordination visits. Provide an in brief to the test site.
  • Conduct Pre-Execution Brief to 01D leadership.
  • Prepare library of data needed for test and arrange for its arrival at the test site.
  • Ensure all deconfliction requirements are met prior to test execution in accordance with JFHQ DoDIN and Navy Cyber Defense Operations Command guidance.
• Lead execution of cyber OT&E related test events as assigned, supporting cooperative vulnerability penetration assessments and adversarial assessments in accordance with DoD guidance and OPTEVFOR Cyber OT&E policies, guidance and procedures.
  
  
  • Coordinate with the OTD, site personnel, program office SMEs, and supporting red teams.
  • Ensure test are conducted safely and OPTEVFOR policies are adhered to.
  • Follow JFHQ-DODIN deconfliction procedures.
  • Verify collected data for accuracy and completeness.
  • Conduct daily hotwashes during test and submit a daily summary report to the OTD and 01D leadership.
  • Ensure all test objectives are completed.
• Post-Test:
  
  
  • Support the Future Operations Officer during the post-test process to ensure traceability between test objectives, collected data, and post-test deliverables.
  • Coordinate with the OTD to set up post-test meetings.
  • Participate in post-test processes including data upload, scoring board, 01D Review Board, CEWG, SERB, and E-SERB.
  • Lead generation of final report products to ensure the information is technically accurate following OPTEVFOR Cyber OT&E procedures and templates and with minimal administrative errors. This includes, drafting of the Data Analysis Summary and Results Enclosure, and reviewing Blue/Gold Sheets drafted by Red Team Operators.

Requirements

• Bachelor's degree in computer science, cybersecurity, or related technical degree OR minimum 5 years' experience in DoD defensive or offensive cyberspace operations planning or exploitation analysis.
• Proficiency in decomposing complex computer systems/networking configurations in support of system exploitation analysis.
• Proficiency in Microsoft Office Applications (MS Visio, Project, Excel, PowerPoint etc.).
• Ability to perform detail-oriented work quality assurance/quality control prior to delivery to the government.
• Proficient in Microsoft Office Suite to include Teams or similar workplace chat and videoconferencing tools.
• Excellent written and oral communications skills to support briefing senior leadership (O6/GS-15 or higher).