Defensive Cyberspace Operations (DCO) Analyst

Tyto Athene, LLC•Colorado Springs, CO

1d•$100,000 - $120,000•Onsite

About The Position

Tyto Athene has an opening for a Defensive Cyber Analyst to support the United States Space Force (USSF) D6 Contract by providing continuous Cybersecurity Monitoring, Intrusion Detection and Cyber Incident Responses. This is 100% onsite and will be day shift hours. Responsibilities: Analyze cyber incidents, correlate incident details and formulate response actions. Provide recommendations on tuning and maximizing capability of existing tools, while providing recommendations for other tools to increase capability. Monitor government provided DCO tools and systems. Conduct after action processes to capture efforts taken to mitigate unauthorized actions. Participate in development of DCO Tactics, Techniques and Procedures (TTPs). Participate in development of DCO concept of operations, processes and procedures. Identify security discrepancies and report security incidents. Provide expert research and analysis in support of expanding programs and area of responsibility.

Requirements

Active DoD TS/SCI clearance
Minimum of one (1) active DoD 8570.07-M Cyber Security Services Provider (CSSP) "Analyst" or "Incident Responder" certifications: CEH, CySA+, GCIH, GCIA, CFR, CCNA Cyber Ops, CCNA-Security, GICSP, Cloud+, SCYBER, PenTest+, CHFI or GCFA
1-3 years of Cybersecurity/IT experience
Experience performing Continuous Cybersecurity Monitoring, Intrusion Detection and Cyber Incident Response.

Nice To Haves

Cybersecurity Service Provider (CSSP) experience is preferred.
Familiarity with Space Operations is highly desired.
Experience with the following tools: Elastic Stack, Kibana, Suricata, Splunk, Snort, Wireshark, Bro/Zeek logs, tcpdump, editcap, ACAS, Microsoft Office 365, Python or Bash scripting.

Responsibilities

Analyze cyber incidents, correlate incident details and formulate response actions.
Provide recommendations on tuning and maximizing capability of existing tools, while providing recommendations for other tools to increase capability.
Monitor government provided DCO tools and systems.
Conduct after action processes to capture efforts taken to mitigate unauthorized actions.
Participate in development of DCO Tactics, Techniques and Procedures (TTPs).
Participate in development of DCO concept of operations, processes and procedures.
Identify security discrepancies and report security incidents.
Provide expert research and analysis in support of expanding programs and area of responsibility.