Blue Team Lead / Senior Cyber Defense Analyst

Omniscius Consulting • Fort Bragg, NC

35d • Onsite

About The Position

Our client is seeking a Blue Team Lead and Senior Cyber Defense Analyst to support the U.S. Army Reserve Command (USARC) Defensive Cyberspace Operations Mission Support Services (DCOMSS) program at Fort Bragg, North Carolina. Lead Blue Team monitoring, detection, incident response coordination, and integrated assessment execution. The lead manages analyst coverage, escalation, technical quality, and operational readiness for the DCOMSS mission.

Requirements

• Minimum 5 years of documented relevant experience.
• Documented specialized operational experience in the cyber functional area in a DoD or enterprise IT environment; cybersecurity analysis, incident response, network monitoring, threat hunting, analyst escalation, and defensive tooling.
• DoD Cyber Workforce Framework (DCWF) 511, Cyber Defense Analyst, Intermediate proficiency.
• Additional DCWF 521 infrastructure support or 531 incident responder qualification is required if those duties are formally assigned.
• Meet DoDM 8140.03 qualification requirements for every assigned work role and proficiency through an approved education, training, certification, or authorized experience route before independent cyber work.
• Document work-role appointment and qualification; maintain required residential qualification and continuing learning.
• A higher-level approved option may qualify the same role at a lower level.
• Current matrix-listed certification options for 511 Intermediate: CEH(P), Cloud+, FITSP-O, GCED, GDSA, GMON, GRID, GSEC, PenTest+, Security+.
• Demonstrated knowledge of Cyber defense analysis, incident response, network security monitoring, threat hunting, defensive tooling, and technical leadership.
• Proficiency with SIEM, EDR, IDS/IPS, network analysis, incident-management, and reporting platforms appropriate to assigned duties and approved access.
• Ability to produce accurate records, explain findings and decisions, and follow approved procedures and security requirements.
• Strong written and verbal communication skills and sound judgment when coordinating with technical staff and Government stakeholders.
• Strong organizational skills, confidentiality, and ability to work independently and collaboratively in a mission-focused environment.
• Active SECRET clearance and ability to maintain assigned system access.
• U.S. citizenship is required.

Nice To Haves

• Current matrix-listed certification options for 521 Intermediate: CEH, Cloud+, CySA+, GMON, GRID, GSEC, PenTest+, SSCP, Security+.
• Current matrix-listed certification options for 531 Advanced: CBROPS, CCSP, CEH, CEH(P), Cloud+, ECIH, FITSP-O, GCED, GCIH, GRID, GSEC, PenTest+, RCCE Level 1, Security+.
• Experience leading tiered DoD cyber defense operations and integrated assessments.
• Relevant DoD or enterprise IT experience with mission tooling and operational reporting.

Responsibilities

• Direct daily Blue Team operations, tiered watch coverage, shift handoffs, priorities, and analyst escalation.
• Coordinate incident response, threat hunting, detection-content development, and defensive tooling with technical staff.
• Maintain Blue Team SOPs, playbooks, quality reviews, training, and response readiness.
• Review significant investigations and ensure timely, accurate operational reports and customer coordination.
• Integrate vulnerability assessment, CTI, tooling, exercises, and surge requirements with steady-state coverage.
• Track staffing, qualifications, access, and performance issues; mentor analysts and drive corrective actions.
• Perform other duties as assigned consistent with the position’s responsibilities, qualifications, clearance, and authorized scope.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed