Cyber Defense Incident Responder (CDIR) - Colorado Springs, Colorado

Davidson Technologies, Inc.•, CO

2d•Onsite

About The Position

Davidson has distinguished itself in the aerospace and missile defense industry with an outstanding reputation for excellence. Specifically, we're recognized for hiring noted experts, experienced engineers and scientists dedicated to designing and delivering advanced, intelligent technology solutions in defense of our Nation. Davidson is seeking a Cyber Defense Incident Responder (CDIR) in Colorado Springs, Colorado. As a CDIR Operator, the successful candidate will utilize the Cyber Security Manager (CSM) toolkit to monitor network logs and message traffic between all elements on the GMD Communication Network (GCN) and elevate alerts via proper channels/protocols. The contingent position(s) are in Fort Greely, Alaska (FGA), and/or Schriever SFB, Colorado (SSFB) and is a permanent position, rotating schedules may be required (no differential pay for shift work, no housing, or cars offered).

Requirements

DOD 8140 Compliance Certification for (531) Cyber Defense Incident Responder: CBROPS or FITSP-O or GISF or CCSP or CEH or Cloud+ or GCED or PenTest+ or Security+ or GSEC
Ability to read, understand and execute defined engineering procedures
Must be a U.S. citizen
Must already possess a Secret Clearance and the ability to obtain Top-Secret if required

Nice To Haves

CySA+ or CFR or GCFA or GCIA or GDSA or GCIH or GICSP or CCE
Familiarity with cyber network defense tools (i.e., Splunk, WAZUH, etc.)
Knowledge of DOD Communication Network Architectures and Network Operations Center (NOC) documentation and processes

Responsibilities

Monitor all mission network traffic
Provide 24-hours a day, 7-days a week, 365 days a year (24/7/365) capability to detect network attacks to GMD network communications. CDIR operators will be expected to work any/all shifts. Standard operations are on 10-hour shifts but may switch to 8-hour or 12-hour schedule based on team availability, mission requirements, or Prime directives.
Support Information Assurance/Computer Network Defense Analysts for monitoring and analysis.
Support monitoring of systems, servers, infrastructure, and software, to include firewalls, proxy servers, and intrusion detection systems.
Review system and firewall logs and IDS alerts using approved tools and in accordance with operating procedures.
Participate, when needed, with the incident response team in a technical hands-on role to support investigation, response, resolution identification, and root cause analysis.
Recommend and implement additional controls to prevent future incidents.
Support other teams by responding to requests for more information and assisting with specific projects.
Provide inputs to the respective operations work schedule.
Provide weekly status reports.
Attend daily/weekly/monthly support meetings, as requested.
Complete required CSM training, system familiarization, safety and security at the designated facility