Defensive Cyber Operations (DCO) Analyst

Defensive Cyber Operations (DCO) AnalystDark Wolf Solutions is looking for a Defensive Cyber Operations Analyst who will perform continuous system monitoring to identify malicious cyber-attacks while supporting the containment, and remediation of IT threats. Additionally, this position will monitor networks and applications to identify a possible cyber-attack or intrusion and help coordinate and report on the cyber incident responses.Key Responsibilities:Vulnerability Management actions to include providing recommendations. Implement mitigations.Active monitoring of Defensive Cyber Operations (DCO) systemsConduct intrusion analysis and correlation of unauthorized activities; provide and implement recommendations to improve customer mitigation processesPerform threat insight processes to provide analysis to support mitigation and remediation activitiesAnalyze cyber incidents, correlate incident details, and formulate and implement response actions with guidance from leadershipParticipate in Root Cause Analysis process and documentation capturing efforts taken to mitigate unauthorized actionsParticipate in the development of DCO tactics, techniques, and proceduresParticipate in the development of DCO concept of operations, processes, and proceduresIdentify security discrepancies and report and respond to security incidentsProvide research and analysis in support of expanding programs and areas of responsibilityDraft documentation for briefings, reports, and informational analysesAssist in the development of local Tactics, Techniques, and Procedures (TTPs)Participate in customer exercises (after duty hours may be required)Adhere to defined policies, master plans and schedulesComplete all initial and annual training requirements and disclosures as outlined by BSTGPerform all other duties as required, consistent with the goals, objectives, and responsibilities of the departmentRequired Qualifications:4+ years of relevant experience2+ years of experience with a SIEM Tool (LogRhythm, Splunk)2+ years of experience with employment of DoD cybersecurity requirements, policies, and procedures to include assessment and authorization activitiesExperience within a vSOC, SOC, or CSSP responding to cyber incidentsDepartment of Defense Directive (DoDD) 8140 (formerly DoDD 8570) IAT CSSP Certification must be obtained prior to hire (CEH, CCNA Security, GCIH, CySA+ or Equivalent)Bachelor's degree in Computer Science, Information Technology, or a related fieldUS Citizenship and an active Top Secret/SCI security clearance requiredDesired Qualifications:Experience performing cybersecurity activities in support of software and system requirements, design, development, testing, and sustainmentExperience with HBSS, ACAS, SCAP Compliance Checker (SCC), DISA STIGsWorking knowledge of NIST 800-53 Security and Privacy ControlsExperience with RHELExperience in performing post-incident computer forensics without destruction of critical dataAbility to provide guidance on DoD Cyber regulations and requirements to engineering and software development staffWe are proud to be an EEO/AA employer Minorities/Women/Veterans/Disabled and other protected categories. In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire.