Army Organic Industrial Base (OIB) Senior Cyber Analyst

COLSA Corporation•Huntsville, AL

About The Position

COLSA Corporation is seeking a highly skilled Organic Industrial Base (OIB) Cybersecurity Analyst to join our team in Huntsville, Alabama. As a senior-level cybersecurity professional, you will play a critical role in protecting our clients' networks and systems from security threats. The Organic Industrial Base (OIB) Cybersecurity Analyst is responsible for strengthening the cyber defense posture of critical industrial and operational environments. This role focuses on developing tactics, techniques, and procedures (TTPs), guiding local defenders, identifying network and security deficiencies, and producing actionable defender playbooks to enhance resilience across OIB systems. At COLSA, people are our most valuable resource and centered at our core value. We invite you to unite your talents with opportunity and be a part of our “Family of Professionals!” Learn about our employee-centric culture and benefits https://www.colsa.com/culture_benefits/

Requirements

Network security monitoring
Security event analysis
Vulnerability assessment
Compliance auditing
Security requirement validation
Threat mitigation
Incident response
Security policy implementation
Risk management
Technical documentation
Leadership and team training
Trend analysis of security events
System certification and accreditation
Security testing and evaluation
Network configuration assessment

Responsibilities

Research, develop, and document cyber defense tactics, techniques, and procedures (TTPs) aligned with current threat intelligence and adversary behaviors
Translate intelligence and real-world incidents into practical defensive guidance for operational environments
Continuously update TTPs based on evolving threats and lessons learned
Provide direct advisory support to local cybersecurity defenders and system administrators
Deliver clear, actionable recommendations for improving detection, response, and mitigation capabilities
Conduct training sessions, workshops, and briefings to enhance defender readiness
Analyze enterprise and industrial networks to identify security gaps, misconfigurations, and architectural weaknesses
Assess existing monitoring, logging, and incident response capabilities
Prioritize deficiencies based on operational risk and mission impact
Design and maintain local defender playbooks for incident response, threat hunting, and defensive operations
Ensure playbooks are tailored to specific environments (IT, OT, ICS) and mission requirements
Incorporate step-by-step procedures, escalation paths, and decision frameworks
Leverage threat intelligence to map adversary activity to defensive actions
Align defensive strategies with frameworks such as MITRE ATT&CK and ICS-specific threat models
Support proactive threat hunting and detection engineering efforts
Coordinate with internal teams, government stakeholders, and partner organizations
Produce detailed reports, risk assessments, and executive summaries
Track remediation efforts and measure improvement in defensive posture