Tier 1 Defensive Cyber Operations (DCO) Analyst with Security Clearance

Responsibilities

• Monitor network and host-based systems.
• Identify and validate suspicious activities.
• Escalate security incidents as required.
• Provide support for foundational incident response procedures.
• Comply with established reporting requirements with accuracy and timelines.
• Assist in managing incident response by documenting and tracking details.
• Participate in training to develop familiarity with tools and processes.
• Support log correlation tasks using tools like Splunk, Elastic, and Sentinel.
• Assist in program reviews and product evaluations as directed
• Surge support may be required to support incident response actions.

Requirements

• 3+ years of experience working in CSSP, SOC, or similar environment, OR, Bachelor’s degree in relevant technical field.
• Must have DoD 8570 IAT Level II and CSSP-specific certifications.
• Experience with Log Aggregation Tools (e.g., Splunk, Elastic, Sentinel) preferred.
• Experience with IDS/IPS, host-based, and operating system logging solutions.
• Knowledge of Incident Response methodologies and procedures strongly preferred.
• Experience with digital forensics, threat hunting, and/or incident response desired.
• Familiarity with CJCSM 6510.01B.
• Analytical ability and strong verbal and written communication skills required.

Qualifications

• DoD 8570 IAT Level II and CSSP-specific certifications, CND and 8140.
• Education Level required: Bachelor’s Degree
• Relevant technical discipline OR 3+ years equivalent experience