Cyber Watch Officer

Job Description Must have a current Top Secret/SCI Clearance and CompTIA Security+ CE Certified. Location: Fort Meade, MD / DISA Headquarters. Top Three Skills SIEM tool experience (ArcSight, Splunk, Wireshark, etc) Experience conducting packet capture (PCAP) analysis Familiarization with STIGS process and structure The Cyber Security Analyst will enable Command and Control (C2) of the Department of Defense Information Network (DODIN) by ensuring its overall health through 24/7 monitoring, directing, controlling, coordination, de-conflicting, synchronizing, and reporting the current status to JFHQ-DODIN staff. Identify and characterize cyber threats to Department of Defense Information Networks (DODIN) through intelligence, operational reporting, and network information. Centrally coordinate and/or recommend CND operations that impact more than one DoD Component. Coordinate Computer Network Defense (CND) operations with DoD Component Commands/Services/Agencies/Field Activities (CC/S/A/FA) and monitor and report effect of DCO-IDM operations on CC/S/A/FA missions. Have knowledge of DoD Computer Network Defense with an understanding of the lifecycle of the network threats, attack vectors, and network vulnerability exploitation. Primary Responsibilities Incident Handling Triage of events Network analysis and threat detection Tend analysis Metric development Vulnerability information Dissemination DoD CSSP Methodology Required Experience/Qualifications Experience coordinating and/or recommending CND operations that affect more than one DoD Component. Experience conducting Packet Capture (PCAP) Analysis Experience with security information and event management (SIEM) systems Basic understanding of intelligence tool Experience with and/or a working knowledge of the following : Networking infrastructure: routers, switches, and web security gateway TCP/IP Protocols and Services Identification and Access Management Firewalls, Access Control Lists Intrusion Detection/Prevention Systems (IDS/IPS) Configuration Management Demilitarized Zone (DMZ) SIEM and JIMS Reports Data backup/Data Loss Prevention (DLP) Host Base Security Systems (HBSS) Enterprise Mission Assurance Support Service (eMASS) #J-18808-Ljbffr