Cyber Defense Operator (CDO)

Responsibilities

• Complete incident response process, including preparation, identification and scoping, containment, eradication and remediation, recovery, and lessons learned.
• Open network intrusion investigations to validate unauthorized activity and determine the type and extent of activity.
• Support OSI DCO technical support to law enforcement and counter-intelligence agencies and activities if required.
• Contribute to lessons learned meetings and briefings.
• Participate in planned and same-day Incident Response deployments.
• Comply with third-party MOU/MOA monitoring and reporting requirements.
• Analyze host DCO events to determine the necessity for higher-level analysis and conduct an initial assessment of threat and impact.
• Develop containment and remediation actions for approval.
• Generate end-of-mission reports (MISREPS) and provide pass-on information for knowledge transfer to subsequent crews.
• Support AF field units as directed by CCC, countering vulnerabilities, minimizing risk, and improving security posture.
• Participate in planning, briefing, and debriefing tasks as directed.
• Provide feedback on detection mechanisms to ESM and Content Development.
• Design incident response plans (IRP) as directed.

Qualifications

• Active TS/SCI Level Clearance.
• IAT Level II Certification (e.g., CompTIA Security+).
• CSSP Incident Responder Certification within 120 days of hire date (preferred).

Benefits

• Medical, Dental, Vision coverage.
• Unlimited vacation, sick leave, and paid federal holidays.
• Education and certification reimbursement program.
• 401(k) retirement plan with safe harbor employer match after 3 months.
• Prepaid legal plan and ID protection plan.
• Accident insurance, critical illness insurance, and hospital indemnity insurance.