SITEC - Cyber Defense Incident Responder - MacDill AFB

Responsibilities Peraton requires Cybersecurity Analysts to support the Special Operation Command Information Technology Enterprise Contract (SITEC) – 3 EOM. This position is located at MacDill AFB. The purpose of the Special Operations Forces Information Technology Enterprise Contract (SITEC) 3 Enterprise Operations and Maintenance (EOM) Task Order (TO) is to provide USSOCOM, its Component Commands, its Theater Special Operations Commands (TSOCs), and its deployed forces with Operations and Maintenance (O&M) services to maintain Network Operations (NetOps); maintain systems and network infrastructure; provide end user and common device support; provide configuration, change, license, and asset management; conduct training, and perform Install, Move, Add, Change (IMACs) services. The responsibilities and tasks associated with each requirement play a pivotal role to USSOCOM, the CIO/J6 organization, and ultimately the end-user who operate around the globe 24x7x365. This position offers an opportunity for experienced cybersecurity professionals to take on advanced responsibilities in defending USSOCOM’s global operations. The Journeyman Cyber Security Analyst will play a pivotal role in enhancing SOC capabilities, mentoring junior team members, and ensuring the security and resilience of systems critical to USSOCOM’s mission success. Expertise in identifying and analyzing sophisticated threats using SIEM platforms, intrusion detection systems (IDS), and other advanced tools. Strategic ability to correlate data from multiple sources to uncover advanced persistent threats (APTs) and complex attack patterns. Proficiency in refining detection rules and alerts to enhance threat identification capabilities. Leadership in managing high-priority security incidents, including coordinating containment, eradication, and recovery strategies. Advanced skills in root cause analysis and delivering actionable recommendations for future mitigation. Ability to create detailed post-incident reports to inform organizational strategy and resilience. Ability to lead audits and assessments, providing recommendations to enhance compliance and streamline processes. Advanced skills in securing NetOps and systems/network infrastructure against evolving threats. Leadership in mentoring junior analysts, fostering their growth and technical expertise. Strategic collaboration with SOC team members, IT staff, and stakeholders to develop coordinated threat responses. Ability to contribute to cross-functional discussions and drive improvements in SOC operations. Continuous Improvement and Research: Commitment to staying informed on emerging threats, technologies, and best practices to enhance SOC capabilities. Strategic mindset to research and recommend tools, techniques, and strategies for improved operations. Ability to deliver training sessions to elevate team knowledge and preparedness. Operate within a 24/7 SOC environment, which may require shift work, including nights, weekends, and holidays. Handle sensitive and classified information in compliance with DoD and USSOCOM requirements. Qualifications Required Qualifications: Min 9 years with HS Diploma, 7 years AS/AA degree, 5 years with BS/BA degree, 3 years with MS/MA A DoD TS/SCI clearance is required DoD 8570 IAT II certifications AND

CEH OR

CFR OR

CCNA Cyber Ops OR CCNA-Security OR CySA+ OR

CHFI OR

GCIA OR

GCIH OR

GCFA OR

GICSP OR

Cloud + OR

SCYBER OR

PenTest + Strong understanding of cybersecurity concepts, including threat detection, malware analysis, and network security. Proficiency with one or more tools such as SIEM platforms, IDS/IPS, endpoint protection solutions, and forensic analysis tools. Advanced analytical and problem-solving skills with the ability to handle complex incidents and scenarios. Effective communication skills, including the ability to create detailed reports and brief stakeholders. Ability to work independently and lead initiatives in a fast-paced, team-oriented environment. Candidate must be willing to work the following work schedule: This position has a 12 hour rotating shift work schedule totaling 80 hours for the two-week pay period. Weekly Schedule is Sunday-Wednesday or Wednesday-Saturday and is composed of 3x12 hour shifts or 3x12 hour shifts and 1x 8 hour shift. Work hours may flex or change to meet mission requirements, most likely on a 3 month rotation. Desired Qualifications: Must be with DoW 8140 compliant under the Work Role Code 531– Cyber Defense Incident Responder - Intermediate level or higher by 1 Oct 26. Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent experience). Advanced certifications such as CISSP, GIAC (e.g., GCIA, GCIH), or OSCP. Experience with scripting or automation tools (e.g., Python, PowerShell) and threat hunting techniques. Knowledge of advanced threat intelligence platforms and methodologies. Target Salary Range $66,000 - $106,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. EEO EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law. #J-18808-Ljbffr Peraton