DCO Cyber Analyst at Telesis Corporation in Aberdeen Proving Ground, Maryland

Job Description:

Position Overview:

The DCO Cyber Analyst will assist in the development and implementation of a Defensive Cyberspace Operations (DCO) capability. They will also provide Tier II technical support for external and internal customers within the organization. They will work individually, actively participate on integrated teams and provide detailed documentation on issues/actions/resolutions. They will oversee and monitor performance of the DCO environment and take steps to resolve issues.



Responsibilities and Duties:

• Research, develop, and implement DCO solutions into the current architecture.


• Identify risks, issues, and interdependencies between system elements, contracts, and stakeholders.


• Execute DCO tool queries, initiation of initial response procedures and the preservation of forensic evidence, and encapsulation of suspected malware and CDS transfer failures using the formats specified by the National Security Agency (NSA).


• Collect and report metrics on the DCO environment.


• Maintain familiarity with changing system requirements and draft appropriate Deficiency Reports (DR), Problem Reports (PR), and/or Engineering Change Requests (ECR) as well as assist with the modifications.


• Monitor, analyze, and detect cyber events for DCO situational awareness, attack sensing and warning, to include incident reporting.


• Maintain knowledge of the most recent cyber events to enable development of notifications/alerts.


• Deploy, configure and maintain the virtual environment.


• Perform system administration of physical servers and virtual machines.


• Understand and identify potential threats and filter log noise created by the applications and data flows.


• Promptly report all anomalies observed and take steps to isolate and correct.


• Isolates and resolves hardware and software problems involving applications, operating system, hardware, or any combination thereof.


• Work independently or with other team members as directed or required.

Required Skills and Qualifications:

• Required to have an active Security+ at a minimum or CISSP (preferred) certification.


• Minimum 2 years of experience in a Help Desk Support position


• Minimum 2 years of experience with Microsoft Enterprise Applications, Servers and Windows client machines.


• Minimum 2 years of experience with Linux and Windows platforms as well as network troubleshooting.


• Minimum 2 years of experience identifying cyber events and incidents, investigating cyber events and incidents.


• Knowledge of SEIM tools, Elastic Cloud Enterprise, Logstash, Kibana, and Kafka, and CDS concepts.


• Possess understanding and experience with UNIX/Linux shell scripts, regular expressions, VMWare ESXi, and Docker.


• Knowledge of IT security principles and methods, such as firewalls, demilitarized zones, and encryption.


• Must be able to work in a fast-paced work environment and be self-motivated.


• Excellent time management skills and ability to multi-task.


• Self-motivated and directed, able to effectively prioritize and execute tasks in a high-pressure environment.


• Ability to communicate effectively with customers and other employees via face-to-face communication, over the telephone or through email.


• Strong analytical and problem-solving abilities, with keen attention to detail.


• Strong customer-service orientation.


• Working technical knowledge of networking protocols, operating systems, and technology standards.
  
  

We are an Equal Opportunity/Affirmative Action Employer. We consider applicants without regard to race, color, religion, age, national origin, ancestry, ethnicity, gender, gender identity, gender expression, sexual orientation, marital status, veteran status, disability, genetic information, or membership in any other group protected by federal, state, or local laws.