Information Systems Continuous Monitoring (ISCM)

Job Description

Job Description

Position : Mid Computer Network Defense Analyst / Information Systems Continuous Monitoring Support 

Clearance Requirements : Active Secret Clearance

Primary Location : Arlington, VA and/or Mechanicsburg, Pennsylvania, with assignments in Arlington, Virginia, as required.

The Information Systems Continuous Monitoring Support professional will provide advanced cybersecurity engineering and operational support to strengthen, sustain, and continuously improve the DSCA’s cybersecurity posture. This role focuses on implementing and optimizing Department of War (DoW) Zero Trust (ZT) principles and Continuous Monitoring strategies to protect enterprise systems, endpoints, users, and sensitive data.

The successful candidate will serve as a subject matter expert (SME) in cybersecurity tools, security policy enforcement, and automation. Working closely with the Cyber Operations Lead, this individual will help integrate and optimize DoW- and Defense Security Cooperation Agency (DSCA)-approved security solutions to enable proactive threat detection, risk-based access decisions, automated response capabilities, and defense-in-depth protection.

Key Responsibilities

• Zero Trust Implementation and Sustainment : Support the Cyber Operations Lead in implementing, operationalizing, and sustaining the organization’s Zero Trust framework across all security pillars, ensuring alignment with DoW cybersecurity requirements and Continuous Monitoring objectives.
• Endpoint Security and Compliance : Implement, configure, and maintain endpoint security solutions, including Endpoint Detection and Response (EDR/XDR) and host-based security tools such as CrowdStrike and Trellix. Establish and enforce device health, security, and compliance policies to support risk-based access and conditional access decisions.
• Data Protection and Security Monitoring : Implement and maintain Data Loss Management (DLM) and Digital Rights Management (DRM) policies to safeguard sensitive information at rest, in use, and in transit. Configure and monitor security tools to enforce data protection requirements and reduce the risk of unauthorized disclosure or misuse.
• File Activity Monitoring and Anomaly Detection : Leverage File Activity Monitoring (FAM) capabilities to establish baseline user and system activity, monitor access to critical data repositories, and identify anomalous behavior that may indicate unauthorized access, data exfiltration, or other security threats.
• Security Automation and Orchestration : Develop, configure, and maintain Security Orchestration, Automation, and Response (SOAR) workflows and playbooks to automate security enforcement and incident response actions. Implement automated responses such as isolating noncompliant devices, blocking suspicious IP addresses, and revoking user sessions based on risk indicators.
• Security Tool Integration and Optimization : Integrate and optimize approved cybersecurity tools and platforms, including Security Information and Event Management (SIEM), EDR/XDR, SOAR, and related security technologies, to improve visibility, threat detection, policy enforcement, and operational efficiency.
• Continuous Monitoring and Threat Response : Support continuous assessment of security controls, monitoring of security events, and analysis of risk signals across integrated security platforms. Identify opportunities to improve detection capabilities, automate repetitive tasks, and strengthen the organization’s overall security posture.
• Cybersecurity Policy Enforcement : Help ensure that endpoint, data protection, identity, and access enforcement mechanisms operate consistently with established security policies, Zero Trust principles, and applicable DoW and DSCA requirements.
• Operational Improvement and Technical Support: Troubleshoot security tool integration and configuration issues, evaluate opportunities to improve automation and monitoring processes, and provide technical expertise to enhance the effectiveness and maturity of cybersecurity operations.

Candidate Qualifications

• Associate or bachelor's degree in cybersecurity, computer science or related field. 
• 4+ years' experience in monitoring or SOC operations. 
• OR 6+ yrs directly relevant SOC/cyber-defense experience without degree. 
• Familiarity with SIEM tools (splunk, arcsight, etc.) and network monitoring. 
• Monitoring tools: Tenable Nessus, AWS Inspector, and AWS GuardDuty Certifications: Security+ CE, CySA+, GCIH, Splunk, or comparable cybersecurity operations certification.

Work Location

Work is performed within and outside the National Capital Region, primarily in Mechanicsburg, Pennsylvania, where most of the cybersecurity team is based, and in Arlington, Virginia. Duties requiring SIPR access must be completed at an approved DSCA facility.

Compensation

The anticipated pay range has yet to be determined. Actual compensation may vary based on location, responsibilities, contract affordability, education, knowledge, skills, competencies, experience, and market data. Compensation is one component of ODRG’s total rewards package and is not a promise of specific pay.

About ODRG

Organizational Development Resource Group (ODRG), LLC provides management consulting and professional services to Department of Defense, federal, commercial, and nonprofit organizations. Our consultants deliver strategic, implementation, and evaluation support designed to improve organizational effectiveness, workforce performance, process efficiency, and cost outcomes.

Candidates may contact their recruiter to request a reasonable accommodation during the application or employment process; information provided will remain confidential and will be used only as needed to provide the accommodation.