IT Systems Analyst V (AFCAT) Endpoint Security Solutions (ESS)

About the role

This position supports the Air Force Cyber Assessment Team (AFCAT) in the 688th Cyberspace Wing and conducts Cyber Operational Readiness Assessments (CORA) at Air Force locations around the world. These assessments will help strengthen the posture and resiliency of the DoW Information Network (DOWIN) by supporting commanders and directors in their efforts to harden their information systems, reduce the attack surface of their cyber terrain, and enhance a more proactive defense.

Responsibilities

• Determine, in conjunction with supervisor, the technology areas to focus personal training on and when to enter the program for required training
• Obtain DCDC certification ESS: Security Fundamentals Professional Certification (SFPC) and complete required assessments and evaluations
• Utilize appropriate tools and methodologies based on DCDC standard processes and procedures
• Stay informed on 688 CW/CC, AFCYBER/CC, and larger Air Force strategic priorities to inform base selection for CORAs
• Advocate with wing organizations for access to enterprise assets and capabilities to prepare for CORA
• Support daily assessment meetings to track progress and provide summaries to base leadership and 688 CW leadership
• Complete assessment checklists as required
• Participate in regular teleconferences with base comm squadron leadership to identify issues and inform commanders on risk
• Provide written feedback on process update recommendations
• Validate firewall configuration across multiple servers
• Utilize tools that enforce network access control (i.e. Cisco, Forescout)
• Review audit logs, logging and account management policies
• Conduct technical evaluations of MDE and Trellix ESS configurations against established security baselines (e.g., STIGs, SRGs) and industry best practices

Requirements

• Requires a bachelor's degree (or equivalent) +5 years of experience, or 8+ years of related experience
• Must have excellent verbal and written communication skills
• Must have excellent critical thinking skills
• Certifications Required: IAT II – Sec+, CASP+, or higher
• Security Clearance Required: Must have active Secret clearance with ability to obtain a Top-Secret clearance with SCI eligibility

Skills

• Desired: Experience with Microsoft Defender for Endpoint (MDE)
• Desired: Microsoft Certified: Windows Server Hybrid Administrator Associate
• Desired: Oracle Database SQL Certified Associate
• Desired: Certified Protection Professional (CPP)
• Desired: Microsoft Certified Security Operations Analyst Associate
• Desired: Active Top Secret Clearance with SCI eligibility

Other

Anticipate team members travelling 6 to 7 weeks per year but could be more or less. Must possess or obtain a US Passport within 6 months. Must be able to fund your travel up front and you will be reimbursed upon filing expense report.