Senior Cyberspace Planner TS/SCI

About the role

As a Technical Consultant focused on Threat Detection, Response & Intelligence, you will safeguard an organization’s digital infrastructure by identifying, analyzing, and mitigating cyber threats. You will leverage industry frameworks and a range of cybersecurity tools to monitor, prioritize, investigate, and respond to security incidents.

Responsibilities

• Conduct Events Investigation: Investigate security incidents using cybersecurity tools such as SIEM, SOAR, EDR, and XDR platforms to identify and analyze potential threats; apply frameworks like MITRE ATT&CK and the Cyber Kill Chain to understand and counter adversary tactics.
• Manage Incident Reports: Develop and manage incident reports, providing actionable recommendations and responses to strengthen clients’ security posture; collaborate with clients to implement measures that prevent future incidents.
• Analyze Network and Endpoint Events: Interpret security tools and logs from Windows, macOS, and Linux systems to identify potential security threats; develop a deep understanding of network and endpoint events to inform incident response strategies.
• Engage in Vulnerability Management: Participate in vulnerability management activities to identify and address potential security vulnerabilities; stay current with emerging threats and evolving technologies to anticipate risks.
• Provide Cyber Threat Intelligence: Gather and analyze cyber threat intelligence to inform incident response strategies and improve clients’ overall security posture.

Requirements

• Experience with Cybersecurity Tools: Proficiency using SIEM, SOAR, EDR, and XDR platforms to monitor, prioritize, investigate, and respond to security incidents.
• Industry Frameworks Application: Experience applying frameworks such as MITRE ATT&CK and the Cyber Kill Chain to understand and counter adversary tactics.
• Network and Endpoint Analysis: Ability to interpret security tools and logs from Windows, macOS, and Linux systems to identify potential threats.
• Vulnerability Management: Experience identifying and addressing security vulnerabilities through vulnerability management activities.
• Cyber Threat Intelligence: Knowledge of gathering and analyzing cyber threat intelligence to inform incident response and improve security posture.
• Prior Government Cyber Operational Planning Experience: Demonstrated expertise planning full-spectrum cyber operations and mission effects in a high OPTEMO government environment.

Preferred Technical And Professional Experience

• Deep Understanding of Emerging Threats: Experience staying current with emerging threats and evolving technologies to anticipate risks and enhance security posture.
• Advanced Cybersecurity Tool Expertise: Exposure to a wide range of cybersecurity tools and technologies, enabling development of innovative solutions to complex security challenges.
• Continuous Learning and Adaptation: Experience with continuous learning and adaptation in cybersecurity, supporting effective responses to new threats and technologies.

Onsite at Fort Meade, MD, 5 days per week.

Required education: Bachelor’s degree.