Job Details

• Network Infrastructure Security: Perform penetration testing (PT) and vulnerability testing in accordance with customer guidance and established Best Business Practices (BBPs), regulations, policies and procedures.
• Defense in Depth Technologies and Procedures: Assess common Defense in Depth Technologies and Procedures for network security enclave metrics, trends and analysis. Conduct Network Assistance Visits (NAV) IAW established BBPs, regulations, policies and procedures as requested by the customer.
• New Technologies, Software Applications, and Network Devices: As directed or for the purpose of meeting a specific DCO-IDM requirement, assess new technologies and devices relevant to DCO-IDM. Determine if technology or device will support/satisfy new requirements, positively enhance the analysis process and security posture of the networks, integrate into existing DCO-IDM architecture and tools sets, and can be properly accredited and authorized for use in the respective AOR.
• Network and System Assessments: Detect DCO vulnerabilities on the networks; Execute persistent PT utilizing approved guidance and tools. Emulate TTP’s employed against customer networks, routinely target and assess enterprise level systems and network architecture to identify exploitable points of entry into customer networks and systems.
• Network Damage Assessment: Deploy an Incident Response Team (IRT) (as determined and approved by the customer and establish incident response plan with appropriate equipment required to successfully perform a Network Damage Assessment.
• Penetration Testing (PT): Evaluate new PT TTPs (new tool usage or adversary TTP) as required for inclusion on approved PT tools list and maintain PT TTPs and tools. Document training and use of all vetted PT tools.
• Situational Awareness of evolving cyberspace threat trends: Participate in Information Technology Security Seminars/Training events (i.e. Black Hat, Defense Readiness Condition); Provide relevant technology feedback and forecasting of potential cyberspace threats to supported activities.
• Report incidents to law enforcement and counterintelligence agencies: Maintain an up-to- date Point of Contact (POC) list for Law enforcement and Counterintelligence (LE and CI) agencies as routinely provided by Computer Crimes Investigative Unit (CCIU) and Cyber Counter Intelligence agencies.
• Attend meetings, conferences, and working groups worldwide: Attend local and distant meetings, conferences and working groups prepared to discuss and provide advice regarding Cyber Operations issues and provide assessment of impact on supported operations; Support the official position of the organization in line with relevant doctrine and local guidance.

• Knowledge and minimum 4 years of experience in Information Assurance Systems/Network Analysis. Experience with Network intrusion detection system (NIDS) software such as SNORT.
• Certification: Must meet CSSP-SPM minimum requirements per DoD 8570.01-M: CISSP-ISSMP or CISM
• Must be able to complete the eMASS Computer Based Training (CBT) within 4 weeks of work start.
• Must obtain Customer Computing Environment (CE) certification within 6 months of hire.
• Knowledge and minimum 2 years of experience in Functional Analysis.
• Technical skills in penetration and vulnerability testing.
• Bachelor's Degree in a related field, preferred.
• Experience with Cybersecurity Service Provider (CSSP) periodic inspections.
• Experience planning, synchronizing, and conducting Information Operations (IO) with the customer and other vendors.
• Experience with Army Cyber Security (CS) guidance and regulations.

Reference ID - GH/Technology/JC//18052020//90935/Senior Functional Analyst