Defense Cyber Operations Officer

TekSynap•Fort Belvoir, VA

7d•Onsite

About The Position

We are seeking a Defense Cyber Operations Officer to join our team supporting the DTRA Cybersecurity Mission encompassing continuous (24x7) operations. The candidate, under the general supervision of the Defense Threat Reduction Agency (DTRA) CSSP Government Lead, will work a rotating 8-hour watch (shift work) in the DTRA Network and Security Operations Center (NOSC) supporting the CSSP monitoring the operational status of the DTRA Areas of Responsibility (AOR). The candidate will function as the central conduit of tracking and communication within and external to the DTRA CSSP, its customers, and higher echelons as it relates to ensuring compliance with named operations. Responsibilities for this position includes: facilitating communication between DTRA CSSP leadership, DTRA Joint Operations Center (JOC), JFHQ-DODIN, DoD Cyber Crime Center (DC3), and cyber assessment teams as necessary to provide status, respond to RFIs, and translating mission requirements into actionable CSSP requirements in order to bridge the gaps between the agencies. TekSynap is a fast growing high-tech company that understands both the pace of technology today and the need to have a comprehensive well planned information management environment. “Technology moving at the speed of thought” embodies these principles – the need to nimbly utilize the best that information technology offers to meet the business needs of our Federal Government customers. We offer our full-time employees a competitive benefits package to include health, dental, vision, 401K, life insurance, short-term and long-term disability plans, vacation time and holidays. Visit us at www.TekSynap.com . Apply now to explore jobs with us!

Requirements

Active Top Secret (TS) with eligibility for Sensitive Compartmented Information (SCI) clearance
Professionally certified, DOD 8570 IAT II and CSSP Analyst.
Bachelor’s degree in Information Technology, or relevant discipline; Additional years of experience may be substituted in lieu of education
Two years in CSSP technology, knowledgeable in the mission and operational requirements of Department of Defense (DoD)
Demonstrated understanding DoD IT operational and technical requirements
Must be willing to perform shift work, work overtime, after hours, holidays, and weekends, as necessary

Nice To Haves

Master’s degree in Communications, Network Management, Telecommunications, Cybersecurity or a related field
Any Project Management Certification (e.g., CPMP, CPM, Project+, PPM, PMITS, PMP, etc.)

Responsibilities

Core Cyber Communications and Coordination: Act as the central communications point for all things cyber; track, communicate, and report status of DTRA CSSP systems and applications
Prepare briefing documentation to show current status of CTO tasking
Attend daily CTO meetings, and other meetings for named operations as required representing DTRA Cyber Operations in the meeting
Maintain situational awareness through daily interactions and coordination with JOC Watch Team, BSN4 Watch Team, and DTRA IT-CS IA Directives personnel
Employ effective web, email, and telephonic communications to clearly manage security incident response procedures as they pertain to CTO, and/or other named operations
Defensive Cyber Operations (DCO) Coordination: Coordinate DTRA Defensive Cyber Operations activities and initiatives across the organization
Serve as primary liaison for DCO Division with external cyber organizations and stakeholders
Facilitate coordination between DTRA DCO operations and broader DoD defensive cyber initiatives
Coordinate DCO-related activities with outside entities including Cyber Fusion Groups, inter-agency partners, and DoD cyber components
Represent DTRA DCO Division in external coordination meetings and working groups
Facilitate information sharing and collaboration on defensive cyber operations matters
Reporting and Status Management: Responsible for reporting status of DTRA CSSP projects, DTRA CPCON changes, status of DTRA compliance with Tier I initiatives, and communicating requests for OPS assistance to the CSSP
Responsible for gathering pertinent data from the Morning IT Operations briefing, and disseminating this data to the CSSP Detect team, and CSSP leadership
Tracking, response, and timely reporting of requests for information (RFI), VDPs, Tippers, CTO's, WARNORDs, TASKORDs and all applicable operation support documents, ensuring any associated tasking is completed by CSSP Watch team
Responsible for tracking and reporting of CPCON status and any relevant actions resulting from CPCON changes to CSSP leadership
Responsible for ensuring coordinated responses to Tier I RFI's and the creation of Blue/Red reports
Exercise Coordination and Training: Coordinate and support Table-top Exercises (TTX) and other cyber training events for DTRA DCO operations
Assist in planning, execution, and after-action reporting for DCO-related exercises
Coordinate DTRA participation in external cyber exercises and training opportunities
Threat Intelligence and Analysis: Develop and maintain threat landscape reporting relevant to DTRA defensive cyber operations
Coordinate threat intelligence sharing between DTRA DCO and external cyber organizations
Support the development of threat assessments and defensive recommendations
Leadership and Team Management: Lead the Cyber Fusion cell; organize monthly meetings to discuss relevant Cybersecurity topics affecting DTRA and other DoD organizations
Oversee shift changes, ensuring communication of case/mission status occur between shifts and the timely notification to leadership during off-hours when priority events occur
Validates that the comprehensive documentation and any operational issues affecting the CSSP team are brought to the attention of the CSSP Lead
Recommends changes to the NOSC video wall to enhance the Detect team's ability to track data and maintain situational awareness
Product Development and Quality Assurance: Ensure that CSSP cases created are of substantial quality to be entered properly into the SIPR case portal and subsequently distributed to JIMS
Oversee the completion of cyber products to include but not limited to: weekly case briefings, Open Source Reporting, miscellaneous internal and external reporting products as required