Cloud Response SME
for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title as heading. No Job ID etc. Remove boilerplate, navigation, legal, EEO, equal-opportunity, scam-warning, duplicated lines, application instructions. Also remove lines like "If you are not ready to apply..." etc. Also remove EEO statements, accommodation contact, etc. Also remove "Build, Innovate, Secure Your Career at Sentar." etc.
We need to preserve all substantive information: company description, role description, responsibilities, qualifications, benefits.
We need to format using for headings, - for any list of duties/requirements/benefits, and
for prose.
We need to decide sections: maybe "About the role" (company description and role overview), "Responsibilities" (list of duties), "Qualifications" (list of qualifications), "Benefits" (list of benefits). Possibly "Skills" could be derived from qualifications but we can combine. The instruction: prefer a few substantive sections over many thin ones. So we could have About the role, Responsibilities, Qualifications, Benefits. No Pay or Schedule because not specified.
We must not include placeholder text like "commensurate with experience". Not present.
We need to extract substantive content.
Let's parse the posting.
First paragraph: "Sentar is proud to be an employee-owned company, fostering a culture of empowerment, collaboration, and innovation. Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the team where you can build, innovate, and secure your career."
That's about company.
Then: "Sentar is seeking a Cloud Response SME in Quantico, VA! Role Description: Sentar is hiring a Cloud Response SME to support our customer in Quantico, VA. The Cloud Response SME serves as the primary technical authority for engineering, optimizing, and maintaining defensive cyberspace operations (DCO) infrastructure across customer cloud environments. The SME protects mission-critical systems by designing, implementing, and maintaining high-impact threat detection use cases to capture unauthorized activity using both cloud-native tools and cross-domain enterprise solutions. This expert directly manages cloud incident investigations and response actions, leveraging a powerful specialized toolkit that includes Tanium, Microsoft Defender for Endpoint, Elastic/Kibana, and the comprehensive suites within the DoD's Joint Regional Security Stack (JRSS). Additionally, the SME operationalizes this knowledge by updating tactics, techniques, and procedures (TTPs) and conducting an advanced cloud security curriculum. Develop detection use cases specifically focused on detecting unauthorized activity in cloud computing environments using the Government’s existing cloud computing defense tools (Azure Active Directory, Microsoft Sentinel, etc). Assist with the investigation of and response to cyberspace incidents involving cloud computing environments and technologies. Assist the Government with the design and deployment of new DCO capabilities in cloud computing environments. Demonstrate effectiveness by successfully identifying and/or preventing Red Team (penetration testing) activity in the Government’s cloud computing environment. At least once per calendar year, update the tactics, techniques, procedures, training, and education documentation (Microsoft Word and PowerPoint Documents stored on SharePoint or other Government approved media) related to this task. At least once per calendar year, prepare and present a course, which covers the basics of Cloud Computing security and common attack scenarios as well as DCO Division specific tactics, techniques, processes, and procedures related to this task. Ensure average satisfaction rating on Government approved student satisfaction surveys meets or exceeds 90%. Provide support required to maintain the Government’s CSSP accreditation per the standards set forth in the CSSP program manual, DOD -8530.01-M, (dated 17 Dec 03 or later) to include documentation and technical writing support as needed."
That's responsibilities.
Then "Qualifications:" list:
"IAT III and CSSP Incident Responder certification IAT III certification list: CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, and CCSP CSSP IR certification list: CEH, CFR, CCNA Cyber Ops, CCNA-Security, CHFI, CySA+, GCFA, GCIH, SCYBER, and PenTest+ Clearance Level: TS/SCI eligibility Education: Technical Bachelor's degree or additional years of experience Experience: At least five years of demonstrated experience in incident investigation in cloud environments.Experience handling national and state level intrusions.Expertise in cloud computing environments with the ability to build and maintain detection use cases to detect unauthorized activity in those environmentsExperience with incident investigation in cloud computing environments.Experience with Tanium, Microsoft Defender for Endpoint, Elastic/Kibana, and the tools included in the DoD’s Joint Regional Security Stack (JRSS).Experience with the design and implementation of defensive cyberspace tools in cloud computing environments."
We need to format as list.
Then Benefits section: "Benefits at Sentar: Our unique employee ownership model attracts top talent, giving employees the freedom to take initiative and drive meaningful improvements. In addition to cultivating a thriving and inclusive work environment, Sentar offers an extensive benefits package designed to support the well-being of employees and their families. Employee ownership is the foundation of our culture, promoting participation, teamwork, and accountability while ensuring long-term financial security and a commitment to excellence. Voluntary Medical, Dental, Vision, with Flexible Spending Plan optionsVoluntary Life, Critical Illness, Accident, and Long Term Care insurance optionsGroup Term Life, Short-Term and Long-Term Disability is provided by Sentar to all qualifying employeesGenerous 401(k) matchCompetitive PTO plan that graduates quickly with years of serviceOther leave programs; holiday schedule along with bereavement, maternity, jury and military dutyTuition reimbursementProfessional development reimbursementRecognition and Awards programs"
We need to split into list items.
We must remove duplicated lines and boilerplate like "If you are not ready to apply..." etc. Also remove EEO statements, accommodation contact, etc.
Now produce HTML.
Structure:
About the role
Sentar is proud to be an employee-owned company, fostering a culture of empowerment, collaboration, and innovation. Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the team where you can build, innovate, and secure your career. Sentar is seeking a Cloud Response SME in Quantico, VA! Sentar is hiring a Cloud Response SME to support our customer in Quantico, VA. The Cloud Response SME serves as the primary technical authority for engineering, optimizing, and maintaining defensive cyberspace operations (DCO) infrastructure across customer cloud environments. The SME protects mission-critical systems by designing, implementing, and maintaining high-impact threat detection use cases to capture unauthorized activity using both cloud-native tools and cross-domain enterprise solutions. This expert directly manages cloud incident investigations and response actions, leveraging a powerful specialized toolkit that includes Tanium, Microsoft Defender for Endpoint, Elastic/Kibana, and the comprehensive suites within the DoD's Joint Regional Security Stack (JRSS). Additionally, the SME operationalizes this knowledge by updating tactics, techniques, and procedures (TTPs) and conducting an advanced cloud security curriculum.
But we might want to separate responsibilities into its own section.
Better: About the role: company overview and role purpose (short). Responsibilities: list of duties.
Let's craft:
About the role: combine first two paragraphs (company description and role description high-level). Could be:
Sentar is proud to be an employee-owned company, fostering a culture of empowerment, collaboration, and innovation. Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the team where you can build, innovate, and secure your career. Sentar is seeking a Cloud Response SME in Quantico, VA.
Then Responsibilities: list of duties from the role description after "Role Description:" maybe we can extract bullet points.
Let's list responsibilities as bullet items:
- Serve as primary technical authority for engineering, optimizing, and maintaining defensive cyberspace operations (DCO) infrastructure across customer cloud environments.
- Protect mission-critical systems by designing, implementing, and maintaining high-impact threat detection use cases to capture unauthorized activity using both cloud-native tools and cross-domain enterprise solutions.
- Directly manage cloud incident investigations and response actions, leveraging a specialized toolkit including Tanium, Microsoft Defender for Endpoint, Elastic/Kibana, and the DoD's Joint Regional Security Stack (JRSS).
- Operationalize knowledge by updating tactics, techniques, and procedures (TTPs) and conducting an advanced cloud security curriculum.
- Develop detection use cases focused on detecting unauthorized activity in cloud computing environments using Government’s existing cloud computing defense tools (Azure Active Directory, Microsoft Sentinel, etc.).
- Assist with investigation and response to cyberspace incidents involving cloud computing environments and technologies.
- Assist the Government with design and deployment of new DCO capabilities in cloud computing environments.
- Demonstrate effectiveness by successfully identifying and/or preventing Red Team (penetration testing) activity in the Government’s cloud computing environment.
- At least once per calendar year, update tactics, techniques, procedures, training, and education documentation (Microsoft Word and PowerPoint stored on SharePoint or other Government approved media).
- At least once per calendar year, prepare and present a course covering basics of Cloud Security, common attack scenarios, and DCO Division specific tactics, techniques, processes, and procedures.
- Ensure average satisfaction rating on Government approved student satisfaction surveys meets or exceeds 90%.
- Provide support required to maintain the Government’s CSSP accreditation per CSSP program manual, DOD -8530.01-M (dated 17 Dec 03 or later), including documentation and technical writing support as needed.
Now Qualifications: list.
We need to parse qualifications:
"IAT III and CSSP Incident Responder certification IAT III certification list: CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, and CCSP CSSP IR certification list: CEH, CFR, CCNA Cyber Ops, CCNA-Security, CHFI, CySA+, GCFA, GCIH, SCYBER, and PenTest+ Clearance Level: TS/SCI eligibility Education: Technical Bachelor's degree or additional years of experience Experience: At least five years of demonstrated experience in incident investigation in cloud environments.Experience handling national and state level intrusions.Expertise in cloud computing environments with the ability to build and maintain detection use cases to detect unauthorized activity in those environmentsExperience with incident investigation in cloud computing environments.Experience with Tanium, Microsoft Defender for Endpoint, Elastic/Kibana, and the tools included in the DoD’s Joint Regional Security Stack (JRSS).Experience with the design and implementation of defensive cyberspace tools in cloud computing environments."
We need to format as list items, maybe grouping.
Let's extract distinct qualifications:
- IAT III certification (one of: CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP)
- CSSP Incident Responder certification (one of: CEH, CFR, CCNA Cyber Ops, CCNA-Security, CHFI, CySA+, GCFA, GCIH, SCYBER, PenTest+)
- Clearance: TS/SCI eligibility
- Education: Technical Bachelor's degree or equivalent experience
- Experience: At least five years of demonstrated experience in incident investigation in cloud environments
- Experience handling national and state level intrusions
- Expertise in cloud computing environments with ability to build and maintain detection use cases to detect unauthorized activity
- Experience with incident investigation in cloud computing environments (maybe duplicate)
- Experience with Tanium, Microsoft Defender
- for any list of duties/requirements/benefits, and
for prose. We need to decide sections: maybe "About the role" (company description and role overview), "Responsibilities" (list of duties), "Qualifications" (list of qualifications), "Benefits" (list of benefits). Possibly "Skills" could be derived from qualifications but we can combine. The instruction: prefer a few substantive sections over many thin ones. So we could have About the role, Responsibilities, Qualifications, Benefits. No Pay or Schedule because not specified. We must not include placeholder text like "commensurate with experience". Not present. We need to extract substantive content. Let's parse the posting. First paragraph: "Sentar is proud to be an employee-owned company, fostering a culture of empowerment, collaboration, and innovation. Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the team where you can build, innovate, and secure your career." That's about company. Then: "Sentar is seeking a Cloud Response SME in Quantico, VA! Role Description: Sentar is hiring a Cloud Response SME to support our customer in Quantico, VA. The Cloud Response SME serves as the primary technical authority for engineering, optimizing, and maintaining defensive cyberspace operations (DCO) infrastructure across customer cloud environments. The SME protects mission-critical systems by designing, implementing, and maintaining high-impact threat detection use cases to capture unauthorized activity using both cloud-native tools and cross-domain enterprise solutions. This expert directly manages cloud incident investigations and response actions, leveraging a powerful specialized toolkit that includes Tanium, Microsoft Defender for Endpoint, Elastic/Kibana, and the comprehensive suites within the DoD's Joint Regional Security Stack (JRSS). Additionally, the SME operationalizes this knowledge by updating tactics, techniques, and procedures (TTPs) and conducting an advanced cloud security curriculum. Develop detection use cases specifically focused on detecting unauthorized activity in cloud computing environments using the Government’s existing cloud computing defense tools (Azure Active Directory, Microsoft Sentinel, etc). Assist with the investigation of and response to cyberspace incidents involving cloud computing environments and technologies. Assist the Government with the design and deployment of new DCO capabilities in cloud computing environments. Demonstrate effectiveness by successfully identifying and/or preventing Red Team (penetration testing) activity in the Government’s cloud computing environment. At least once per calendar year, update the tactics, techniques, procedures, training, and education documentation (Microsoft Word and PowerPoint Documents stored on SharePoint or other Government approved media) related to this task. At least once per calendar year, prepare and present a course, which covers the basics of Cloud Computing security and common attack scenarios as well as DCO Division specific tactics, techniques, processes, and procedures related to this task. Ensure average satisfaction rating on Government approved student satisfaction surveys meets or exceeds 90%. Provide support required to maintain the Government’s CSSP accreditation per the standards set forth in the CSSP program manual, DOD -8530.01-M, (dated 17 Dec 03 or later) to include documentation and technical writing support as needed." That's responsibilities. Then "Qualifications:" list: "IAT III and CSSP Incident Responder certification IAT III certification list: CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, and CCSP CSSP IR certification list: CEH, CFR, CCNA Cyber Ops, CCNA-Security, CHFI, CySA+, GCFA, GCIH, SCYBER, and PenTest+ Clearance Level: TS/SCI eligibility Education: Technical Bachelor's degree or additional years of experience Experience: At least five years of demonstrated experience in incident investigation in cloud environments.Experience handling national and state level intrusions.Expertise in cloud computing environments with the ability to build and maintain detection use cases to detect unauthorized activity in those environmentsExperience with incident investigation in cloud computing environments.Experience with Tanium, Microsoft Defender for Endpoint, Elastic/Kibana, and the tools included in the DoD’s Joint Regional Security Stack (JRSS).Experience with the design and implementation of defensive cyberspace tools in cloud computing environments." We need to format as list. Then Benefits section: "Benefits at Sentar: Our unique employee ownership model attracts top talent, giving employees the freedom to take initiative and drive meaningful improvements. In addition to cultivating a thriving and inclusive work environment, Sentar offers an extensive benefits package designed to support the well-being of employees and their families. Employee ownership is the foundation of our culture, promoting participation, teamwork, and accountability while ensuring long-term financial security and a commitment to excellence. Voluntary Medical, Dental, Vision, with Flexible Spending Plan optionsVoluntary Life, Critical Illness, Accident, and Long Term Care insurance optionsGroup Term Life, Short-Term and Long-Term Disability is provided by Sentar to all qualifying employeesGenerous 401(k) matchCompetitive PTO plan that graduates quickly with years of serviceOther leave programs; holiday schedule along with bereavement, maternity, jury and military dutyTuition reimbursementProfessional development reimbursementRecognition and Awards programs" We need to split into list items. We must remove duplicated lines and boilerplate like "If you are not ready to apply..." etc. Also remove EEO statements, accommodation contact, etc. Now produce HTML. Structure:
About the role
Sentar is proud to be an employee-owned company, fostering a culture of empowerment, collaboration, and innovation. Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the team where you can build, innovate, and secure your career. Sentar is seeking a Cloud Response SME in Quantico, VA! Sentar is hiring a Cloud Response SME to support our customer in Quantico, VA. The Cloud Response SME serves as the primary technical authority for engineering, optimizing, and maintaining defensive cyberspace operations (DCO) infrastructure across customer cloud environments. The SME protects mission-critical systems by designing, implementing, and maintaining high-impact threat detection use cases to capture unauthorized activity using both cloud-native tools and cross-domain enterprise solutions. This expert directly manages cloud incident investigations and response actions, leveraging a powerful specialized toolkit that includes Tanium, Microsoft Defender for Endpoint, Elastic/Kibana, and the comprehensive suites within the DoD's Joint Regional Security Stack (JRSS). Additionally, the SME operationalizes this knowledge by updating tactics, techniques, and procedures (TTPs) and conducting an advanced cloud security curriculum.
But we might want to separate responsibilities into its own section. Better: About the role: company overview and role purpose (short). Responsibilities: list of duties. Let's craft: About the role: combine first two paragraphs (company description and role description high-level). Could be:Sentar is proud to be an employee-owned company, fostering a culture of empowerment, collaboration, and innovation. Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the team where you can build, innovate, and secure your career. Sentar is seeking a Cloud Response SME in Quantico, VA.
Then Responsibilities: list of duties from the role description after "Role Description:" maybe we can extract bullet points. Let's list responsibilities as bullet items: - Serve as primary technical authority for engineering, optimizing, and maintaining defensive cyberspace operations (DCO) infrastructure across customer cloud environments. - Protect mission-critical systems by designing, implementing, and maintaining high-impact threat detection use cases to capture unauthorized activity using both cloud-native tools and cross-domain enterprise solutions. - Directly manage cloud incident investigations and response actions, leveraging a specialized toolkit including Tanium, Microsoft Defender for Endpoint, Elastic/Kibana, and the DoD's Joint Regional Security Stack (JRSS). - Operationalize knowledge by updating tactics, techniques, and procedures (TTPs) and conducting an advanced cloud security curriculum. - Develop detection use cases focused on detecting unauthorized activity in cloud computing environments using Government’s existing cloud computing defense tools (Azure Active Directory, Microsoft Sentinel, etc.). - Assist with investigation and response to cyberspace incidents involving cloud computing environments and technologies. - Assist the Government with design and deployment of new DCO capabilities in cloud computing environments. - Demonstrate effectiveness by successfully identifying and/or preventing Red Team (penetration testing) activity in the Government’s cloud computing environment. - At least once per calendar year, update tactics, techniques, procedures, training, and education documentation (Microsoft Word and PowerPoint stored on SharePoint or other Government approved media). - At least once per calendar year, prepare and present a course covering basics of Cloud Security, common attack scenarios, and DCO Division specific tactics, techniques, processes, and procedures. - Ensure average satisfaction rating on Government approved student satisfaction surveys meets or exceeds 90%. - Provide support required to maintain the Government’s CSSP accreditation per CSSP program manual, DOD -8530.01-M (dated 17 Dec 03 or later), including documentation and technical writing support as needed. Now Qualifications: list. We need to parse qualifications: "IAT III and CSSP Incident Responder certification IAT III certification list: CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, and CCSP CSSP IR certification list: CEH, CFR, CCNA Cyber Ops, CCNA-Security, CHFI, CySA+, GCFA, GCIH, SCYBER, and PenTest+ Clearance Level: TS/SCI eligibility Education: Technical Bachelor's degree or additional years of experience Experience: At least five years of demonstrated experience in incident investigation in cloud environments.Experience handling national and state level intrusions.Expertise in cloud computing environments with the ability to build and maintain detection use cases to detect unauthorized activity in those environmentsExperience with incident investigation in cloud computing environments.Experience with Tanium, Microsoft Defender for Endpoint, Elastic/Kibana, and the tools included in the DoD’s Joint Regional Security Stack (JRSS).Experience with the design and implementation of defensive cyberspace tools in cloud computing environments." We need to format as list items, maybe grouping. Let's extract distinct qualifications: - IAT III certification (one of: CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP) - CSSP Incident Responder certification (one of: CEH, CFR, CCNA Cyber Ops, CCNA-Security, CHFI, CySA+, GCFA, GCIH, SCYBER, PenTest+) - Clearance: TS/SCI eligibility - Education: Technical Bachelor's degree or equivalent experience - Experience: At least five years of demonstrated experience in incident investigation in cloud environments - Experience handling national and state level intrusions - Expertise in cloud computing environments with ability to build and maintain detection use cases to detect unauthorized activity - Experience with incident investigation in cloud computing environments (maybe duplicate) - Experience with Tanium, Microsoft Defender