Action Officer

Sentar • Charleston, SC

4d

About The Position

Sentar is seeking a Cyber Operations Center (CyOC) Action Officer in Charleston, South Carolina. The position supports the Defense Health Agency’s mission-critical cybersecurity operations as part of the Naval Information Warfare Center Atlantic Defensive Cyberspace Operations Integrated Product Team. The role helps protect sensitive healthcare systems and global infrastructure across the Department of Defense from cyber threats, unauthorized access, and emerging vulnerabilities.

The Action Officer works with DHA subscribers to receive, assess, and respond to cybersecurity Requests for Information (RFIs). The role involves researching and analyzing threats, coordinating with intelligence and operational teams, and producing actionable intelligence reports. The position also supports RFI workflows and operational reporting, provides technical guidance to subscribers, and coordinates with NIWC Atlantic and DHA stakeholders in a fast-paced environment.

The position requires a Top Secret/SCI clearance, a DoD 8140 baseline certification at the time of hire, and substantial cybersecurity or threat-intelligence experience supporting DoD or federal agencies.

Requirements

• Top Secret/SCI clearance required.
• Must meet the DoD 8140 (formerly 8570) baseline certification requirement at the time of hire; commonly accepted certifications include Security+, CISM, or CISSP.
• At least 5 years of experience in cybersecurity, threat-intelligence analysis, or related cyber-defense roles supporting DoD or federal agencies.
• At least 5 years of experience conducting cyber-threat research, analysis, and reporting in support of SOC, incident response, or cyber-threat-intelligence teams.
• Strong understanding of DoD cybersecurity policies, including DoD 8500-series, DoDI 8510.01 (RMF), and CJCSM 6510.01 (Cyber Incident Handling).
• Proficiency analyzing cyber threats using the MITRE ATT&CK framework, including tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs).
• Experience with threat-intelligence platforms, SIEM tools such as Splunk, ELK, or QRadar, and OSINT research tools.
• Familiarity with malware analysis, DDoS patterns, phishing campaign forensics, and adversarial behavior.
• Strong written and verbal communication skills, including drafting and presenting technical intelligence reports to varied audiences.
• Ability to manage and prioritize multiple concurrent RFIs in a high-tempo operations environment.
• Working knowledge of network architecture and protocols, including TCP/IP, DNS, HTTP/S, SMTP, and common intrusion methods.
• Hands-on experience with collaboration and tracking tools such as JIRA, Confluence, MS Teams, and SharePoint.
• Demonstrated ability to work collaboratively across functions with minimal supervision.

Responsibilities

• Receive, assess, and triage incoming Requests for Information (RFIs) from DHA subscribers.
• Research and analyze cyber incidents, indicators, and adversary activity.
• Develop and deliver concise, accurate, actionable intelligence reports tailored to subscriber needs.
• Collaborate with CyOC analysts, incident responders, and threat-intelligence teams to produce comprehensive RFI responses.
• Maintain awareness of current and emerging cyber threats, vulnerabilities, and attack techniques.
• Support development, documentation, and refinement of RFI processing workflows and standard operating procedures.
• Provide subscribers with technical guidance on cyber threat mitigation and security best practices.
• Track RFI status, metrics, and trends for operational reporting and performance improvement.
• Coordinate with NIWC Atlantic and DHA stakeholders to align mission needs and support timely responses to critical intelligence requirements.
• Manage competing priorities in a high-tempo operational environment.

Benefits

• Voluntary medical, dental, and vision coverage, with Health Savings Account or Flexible Spending Plan options.
• Voluntary life, critical illness, accident, and long-term care insurance options.
• Group term life insurance and short- and long-term disability coverage for qualifying employees.
• 401(k) match.
• PTO plan that increases with years of service.
• Holiday schedule and other leave programs, including bereavement, maternity, jury, and military duty leave.
• Mental health awareness programs.
• Tuition reimbursement.
• Professional development reimbursement.
• Recognition and awards programs.
• Employee ownership.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed