Defensive Cyber Operations (DCO) Analyst

Tyto Athene has an opening for a Defensive Cyber Analyst to support the United States Space Force (USSF) D6 Contract by providing continuous Cybersecurity Monitoring, Intrusion Detection and Cyber Incident Responses.

Responsibilities:

• Analyze cyber incidents, correlate incident details and formulate response actions.
• Provide recommendations on tuning and maximizing capability of existing tools, while providing recommendations for other tools to increase capability.
• Monitor government provided DCO tools and systems.
• Conduct after action processes to capture efforts taken to mitigate unauthorized actions.
• Participate in development of DCO Tactics, Techniques and Procedures (TTPs).
• Participate in development of DCO concept of operations, processes and procedures.
• Identify security discrepancies and report security incidents.
• Provide expert research and analysis in support of expanding programs and area of responsibility.

Required:

• Active DoD TS/SCI clearance
• Minimum of one (1) active DoD 8570.07-M Cyber Security Services Provider (CSSP) "Analyst" or "Incident Responder" certifications:
• CEH, CySA+, GCIH, GCIA, CFR, CCNA Cyber Ops, CCNA-Security, GICSP, Cloud+, SCYBER, PenTest+, CHFI or GCFA
• 1-3 years of Cybersecurity/IT experience
• Experience performing Continuous Cybersecurity Monitoring, Intrusion Detection and Cyber Incident Response.
• Cybersecurity Service Provider (CSSP) experience is preferred.
• Familiarity with Space Operations is highly desired.
• Experience with the following tools:
• Elastic Stack, Kibana, Suricata, Splunk, Snort, Wireshark, Bro/Zeek logs, tcpdump, editcap, ACAS, Microsoft Office 365, Python or Bash scripting.

Clearance: Active DoD TS/SCI clearance

Location: Schriever Space Force Base (SFB), CO