Mid-Level Cyber Threat Emulation Analyst IRES - SSFB

Amentum•Colorado Springs, CO

3d•$128,000 - $136,000•Onsite

About The Position

We are seeking a highly motivated and experienced Mid-Level Cyber Threat Emulation (CTE) Analyst. The CTE Analyst supports the Missile Defense Agency (MDA) on the Integrated Research and Development for Enterprise Solutions (IRES) contract. The CTE Analyst will be responsible for operating the Department of War Cyber Defense Command Information Network’s (DCDC-IN) Cyber Threat Emulation (CTE) toolset. This role requires a deep understanding of cybersecurity vulnerabilities in a DoD environment and the ability to correlate threat and vulnerability data against known adversary exploits and techniques. The ideal candidate will be a customer-focused individual with excellent communication skills and the ability to work both independently and as part of a team.

Requirements

Must have 4, or more, years of general (full-time) work experience
Must have 2, or more, years of combined experience with any of the following: Performing manual or automated penetration testing in an enterprise environment, Practical experience with vulnerability assessment, cybersecurity frameworks, or conducting risk assessments, Experience performing the full life cycle of incident response and enterprise-level monitoring
Must have 6, or more, months of experience working in a management or leadership role
Must have prior MDA experience.
Must be familiar with the Common Vulnerabilities and Exposures (CVE) database.
Must be familiar with the role of a CSSP in the DoD’s tiered cybersecurity structure.
Must be familiar with Information Assurance Vulnerability Bulletins (IAVBs) and Alerts (IAVAs)
Must have a strong understanding of cyber threat emulation tools, policies, and procedures.
Must have an understanding of security, audit, and compliance principles.
Must have an understanding of defense in depth principles and defensive cyber operations
Must have an understanding of defensive cyber operations common toolsets to include: Next Generation Firewalls (Palo Alto experience Preferred), Intrusion Prevention / Detections Systems, Email Security Gateways, Network Proxies, Reverse Proxies and Web Application Firewalls, Security Information and Event Management systems, Endpoint Detection and Response, Vulnerability Scanning and Assessment tools
Must have 1, or more, of the following certifications: CompTIA Security+, CompTIA Cybersecurity Analyst (CySA+), ICS2 Systems Security Certified Practitioner (SSCP), GIAC Industry Cyber Security Certification (GICSP), GIAC Security Essentials (GSEC)
Must have or obtain within 6 months of start date, the CompTIA PenTest+ certification
Must have an active DoW Secret Security Clearance

Nice To Haves

Palo Alto experience

Responsibilities

Perform Defensive Cyber Operations (DCO) as it pertains to a DoD Cybersecurity Service Provider (CSSP)
Measures effectiveness of defense-in-depth architecture against known vulnerabilities.
Support Incident Response across the enterprise IAW DoD regulations and instructions.
Develop an Exploitation Analyst training plan by instructing, evaluating, and mentoring junior, mid, and senior analysts.
Execute HHQ directed and custom CTE actions with specific adversary tactics, techniques, and procedures (TTPs) to assess toolset detection and alerting.
Collaborate with the Vulnerability Assessment and Cyber Defense Teams to develop evaluation criteria and methodologies aligned with HHQ inspection requirements and industry best practices.
Evaluate personnel training and effectiveness in incident response processes and procedures to detect, respond, and mitigate simulated and real-world threats to recognize the need for additional training