Defensive Cyber Operations (DCO) Analyst

Tyto Athene has an opening for a Defensive Cyber Analyst to support the United States Space Force (USSF) D6 Contract by providing continuous Cybersecurity Monitoring, Intrusion Detection and Cyber Incident Responses. Responsibilities: Analyze cyber incidents, correlate incident details and formulate response actions. Provide recommendations on tuning and maximizing capability of existing tools, while providing recommendations for other tools to increase capability. Monitor government provided DCO tools and systems. Conduct after action processes to capture efforts taken to mitigate unauthorized actions. Participate in development of DCO Tactics, Techniques and Procedures (TTPs). Participate in development of DCO concept of operations, processes and procedures. Identify security discrepancies and report security incidents. Provide expert research and analysis in support of expanding programs and area of responsibility. Required: Minimum of one (1) active DoD 8570.07-M Cyber Security Services Provider (CSSP) \"Analyst\" or \"Incident Responder\" certifications: CEH, CySA+, GCIH, GCIA, CFR, CCNA Cyber Ops, CCNA-Security, GICSP, Cloud+, SCYBER, PenTest+, CHFI or GCFA 1-3 years of Cybersecurity/IT experience Experience performing Continuous Cybersecurity Monitoring, Intrusion Detection and Cyber Incident Response. Cybersecurity Service Provider (CSSP) experience is preferred. Familiarity with Space Operations is highly desired. Experience with the following tools: Elastic Stack, Kibana, Suricata, Splunk, Snort, Wireshark, Bro/Zeek logs, tcpdump, editcap, ACAS, Microsoft Office 365, Python or Bash scripting. Clearance: Active DoD TS/SCI clearance #J-18808-Ljbffr