Cyber Defense & Vulnerability Operations Analyst

Na Ali'i Consulting & Sales, LLC.•Charleston, SC

About The Position

The Cyber Defense & Vulnerability Operations Analyst supports Navy ERP through continuous security monitoring, alert analysis, and enterprise vulnerability management. This role investigates and responds to indicators of compromise across databases, operating systems, and middleware. The specialist oversees required scanning, tracks compliance, and submits data to DoD repositories, including VRAM and CMRS. They also lead remediation meetings with database, application, and infrastructure subject matter experts to address identified vulnerabilities.

Requirements

4+ years in SOC analysis, cyber defense, or vulnerability assessment within DoD/Navy environments.
Advanced knowledge of Splunk (SPL query language, Enterprise Security, correlation searches, alerting).
Hands-on operational experience with: Tenable ACAS (Nessus and SecurityCenter).
Hands-on operational experience with: DoD HBSS/ESS (Trellix ePO, agent verification, module status).
Direct experience uploading and tracking vulnerability data in VRAM and CMRS.
Foundational understanding of enterprise databases (SAP HANA, Oracle) and OS security.
DoD 8570/8140 CSSP Analyst or IAT II/III baseline (e.g., CySA+, CEH, CASP+ CE, CISSP).

Nice To Haves

Splunk Certified Cybersecurity Defense Analyst or Splunk Core Certified Advanced Power User.
DISA HBSS 201/301 Administrator training or Tenable ACAS certification.
Prior experience coordinating with NAWC-AD or Navy program office cyber teams.

Responsibilities

Monitor real-time security alerts from Splunk, Tripwire, and HBSS in accordance with SOPs.
Triage, analyze, and escalate suspicious events, anomalous behaviors, and security incidents.
Conduct deep-dive activity monitoring across core Navy ERP architecture: Databases: SAP HANA, Oracle, and Sybase. Operating Systems: Windows Server and Linux host activities. Applications & Middleware: Tripwire, webMethods, IBM Tivoli, and integration layers.
Develop, refine, and optimize correlation searches within Splunk Enterprise Security.
Tune detection logic to eliminate false positives and enhance detection fidelity.
Design custom Splunk dashboards, scheduled alerts, and compliance tracking metrics.
Define data requirements and logging standards for new inbound data sources.
Schedule, execute, and validate weekly and ad-hoc ACAS (Tenable) vulnerability scans.
Schedule, execute, and review weekly and ad-hoc Onapsis scans across SAP instances.
Ensure 100% of Navy ERP assets receive required policy scans.
Monitor HBSS/ESS agent coverage across all endpoints; coordinate with NAWC-AD data center HBSS admins.
Export verified ACAS scan results and upload directly into VRAM.
Consolidate vulnerability data and HBSS status metrics for regular submission into CMRS.
Generate and distribute detailed vulnerability assessment reports to technical SMEs.
Lead or back up weekly vulnerability review meetings with system, database, and platform SMEs.
Track remediation milestones and validate post-remediation re-scans.
Maintain and update threat response playbooks, scanning schedules, and operational SOPs.