CSSP Analyst, Journeyman

Federal IT Consulting (FEDITC)•Indianapolis, IN

5d•Onsite

About The Position

FEDITC, LLC is seeking a CSSP Analyst, Journeyman to provide continuous cybersecurity monitoring, threat analysis, and incident response support for the DFAS Common Computing Environment (CCE). The role monitors security events, investigates potential threats, analyzes phishing attempts, and performs initial incident triage and classification. It also supports threat hunting, incident reporting, and security documentation across classified and unclassified networks to help ensure compliance with DoD cybersecurity requirements and DFAS incident response procedures. The position requires on-site work and U.S. citizenship with an active Top Secret DoD security clearance.

Requirements

At least 5 years of cybersecurity/SOC analyst experience.
Security+ certification.
DoD 8140 Cyber Defensive Analyst (Intermediate) Playlist qualification.
Experience with SIEM tools such as Azure Sentinel, ArcSight, or Splunk.
Knowledge of phishing analysis and email security.
Experience with incident triage and classification.
Understanding of network security monitoring.
Familiarity with DFAS CSIRP or similar incident response procedures.
Experience with ticketing systems for incident tracking.
Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related field.
U.S. citizenship.
Active Top Secret clearance and ability to pass a background check.
Maintain applicable security clearances at the level required by the client and/or applicable certifications as requested by FEDITC or required by its clients, customers, or prime contractors.

Nice To Haves

CySA+ certification (upgrade path).
Experience with DFAS CSSP operations.
Prior 24/7 SOC shift experience.
Azure Sentinel KQL query experience.
Threat-hunting experience.
Digital forensics fundamentals.
Experience with classified network monitoring.

Responsibilities

Provide 24/7 security monitoring and analysis for DFAS CCE on-site.
Monitor security events using Azure Sentinel, ArcSight, and other SIEM tools.
Perform initial triage and classification of security incidents.
Analyze phishing and spam emails, reviewing headers, attachments, and URLs for malicious indicators.
Validate and classify incidents, determine true positives, and escalate when required.
Draft incident summaries and analyst reports for leadership and case records.
Keep investigation notes and case records updated.
Support protocol monitoring and achieve 100% documentation per DFAS CSIRP.
Participate in threat-hunting activities under senior guidance.
Operate CSSP toolsets for unclassified and classified enclaves.