Defensive Cyber Operations (DCO) Analyst
Core
Perform continuous system monitoring, incident response, and threat detection to identify and remediate malicious cyber-attacks in on-premise and cloud environments.
Role type
Senior Defensive Cyber Operations Analyst (SOC/IR)
Builds
Secure IT environments and threat detection capabilities for DoD missions
Domain
Defense / Cybersecurity
Required skills
Incident response, threat detection, log analysis, vulnerability management, root cause analysis, DoD policy compliance, security documentation
Preferred skills
AI/ML security tools, EDR platforms, Infrastructure-as-Code, post-incident forensics, DoD cyber regulations guidance
Technologies
Splunk Enterprise, ELK Stack, AWS GovCloud, GitLab, Terraform, Ansible, SentinelOne, HBSS, ACAS, SCAP, DISA STIGs, NIST 800-53
Responsibilities
Monitor and analyze security telemetry across on-prem and cloud environments; triage security events and detect anomalies; implement vulnerability mitigations; conduct intrusion analysis and root cause analysis; develop DCO tactics and procedures; draft security reports and briefings; participate in customer exercises.
Seniority
Senior, hands-on IC