Cybersecurity Defensive Cyber Operations (CDO) Analyst (TS/SCI - Onsite)
Apply NowCompany: André Global, Inc.
Location: Alexandria, VA 22304
Description:
looking for a Cybersecurity Defensive Cyber Operations (CDO) Analyst to join our team of experts to assist with building state of the art data platforms for the Department of Defense.
This role provides support for complex computer network exploitation and defense techniques to include deterring, identifying and investigating computer and network intrusions, and vulnerability mitigation.
Responsibilities:
Skills and Certifications [note: bold skills and certification are required]
Monitor network traffic for security incidents and event
cybersecurity tools (i.e. , firewalls, SIEMs)
Analyze and respond to security alerts
This role provides support for complex computer network exploitation and defense techniques to include deterring, identifying and investigating computer and network intrusions, and vulnerability mitigation.
Responsibilities:
- Monitor network traffic for security incidents and events using various cybersecurity tools (i.e. , firewalls, SIEMs).
- Analyze and respond to security alerts to detect and counter potential cyber threats.
- Conduct real-time incident investigations and provide detailed incident response reports.
- Identify and analyze malicious activities, assess risks, and implement strategies to defend against cyber-attacks.
- Perform event correlation using information gathered from multiple sources to gain situational awareness.
- Conduct threat intelligence analysis and stay updated on the latest DoD cyber threat landscape as an effective threat hunter.
- Develop and promote best practices for information security within the organization.
- Perform periodic risk assessments using Situational Awareness Report (SAR).
- Review and triage JFHQ-DoDIN Cyber Task Orders to identify potential vulnerabilities and report back to relevant commands as required.
- Translate Orders to actionable Jira tasks and track their progress for reporting.
- Collaborate with enterprise-wide cyber defense staff to validate network alerts and coordinate responses.
- Provide weekly summary reports of network events and activities relevant to cyber defense practices.
Qualifications:
Required Skills: - Clearance: TS/SCI
- Bachelor's degree in Cybersecurity, Information Technology, or a related field.
- 10+ years' experience in cybersecurity, with 5+ years' experience in a Defensive Cyber Operations role, preferably for the Department of Defense
- Strong knowledge of cybersecurity principles, computer networking security, and Zero Trust Architecture/implementation.
- Excellent analytical and problem-solving skills.
- Strong communication and teamwork skills.
- Relevant certifications such as: or CySA+ or CBROPS or CFR or FITSP-O or GCIA or GDSA or GICSP or GCFA
- Optional certs: CNDSP, CISSP, CEH; GFACT, GISF, Cloud+, GCED, PenTest, CompTIA Security+
BENEFITS
Skills and Certifications [note: bold skills and certification are required]
Monitor network traffic for security incidents and event
cybersecurity tools (i.e. , firewalls, SIEMs)
Analyze and respond to security alerts