Cyber Operations Center (CyOC) Lead Analyst

Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the small business team where you can build, innovate, and secure your career.

The Cyber Operations Center (CyOC) Lead Analyst is a senior-level cybersecurity professional responsible for leading, coordinating, and integrating key Cybersecurity Service Provider (CSSP) functions within the Defense Health Agency (DHA) Cyber Operations Center (CyOC). This role requires expertise in cyber operations, compliance management, and incident response, with a strong emphasis on leadership, cross-functional collaboration, and strategic coordination across multiple teams and stakeholders.

As a key leader within the CyOC structure, the Lead Analyst will serve as the primary interface between CSSP functional teams, interagency partners, and DHA leadership, ensuring alignment with DHA cybersecurity objectives, USCYBERCOM directives, and federal cybersecurity policies.

Key Responsibilities:

Strategic Leadership & Team Coordination

• Lead and coordinate teams within the DHA Cyber Operations Center, including Incident Response, Continuous Monitoring (ConMon), Threat Intelligence, Vulnerability Management, Digital Forensics, and Compliance.
• Serve as the senior CSSP liaison to DHA leadership, JFHQ-DoDIN, USCYBERCOM, interagency partners, and other stakeholders, ensuring effective communication and alignment of cybersecurity initiatives.
• Oversee the implementation of CSSP functions, ensuring teams execute cyber defense operations, compliance monitoring, and risk assessments in accordance with DoD cybersecurity policies.
• Develop and enforce Standard Operating Procedures (SOPs) to standardize cybersecurity reporting, risk assessments, and information dissemination.

Cybersecurity Operations & Incident Response

• Direct cyber incident response efforts, ensuring timely escalation, coordination, and resolution of cybersecurity threats affecting DHA networks and systems.
• Oversee threat intelligence analysis, working with cyber hunt teams and intelligence units to identify, assess, and mitigate emerging threats.
• Ensure forensic investigations are conducted in alignment with DHA and DoD forensic standards, including proper evidence handling and chain-of-custody documentation.
• Guide the development and enforcement of cyber threat hunting methodologies, Indicators of Compromise (IoCs), and SIEM alerting strategies.
• Supervise the development and execution of Purple Team engagements, testing defensive cyber operations (DCO) and CSSP processes.

Compliance & Vulnerability Management

• Oversee compliance with USCYBERCOM directives, DoD cybersecurity policies (NIST 800-53, RMF, DoDI 8530.01), and federal regulations.
• Lead the vulnerability management team, ensuring identification, assessment, and remediation of cyber vulnerabilities through IAVM, VRAM, CMRS, and ACAS reporting.
• Direct CSSP teams in executing continuous monitoring (ConMon) activities, ensuring adherence to CJCSI 6510.01F and maintaining the cybersecurity posture of DHA networks.
• Ensure compliance with JFHQ-DoDIN and DISA security assessment requirements, maintaining operational readiness for CCRI and DoD audits.

Information Management & Interagency Coordination

• Act as the primary point of contact for cybersecurity directives and information flow, ensuring DHA CyOC receives and disseminates critical updates.
• Oversee cross-functional collaboration between CSSP teams, defensive cyber operations (DCO) teams, and DHA IT security stakeholders.
• Facilitate interagency coordination, ensuring effective collaboration with VA CSOC, USCYBERCOM, DISA, and CISA on cyber incident reporting and threat intelligence sharing.
• Present cybersecurity reports, threat assessments, and risk mitigation strategies to senior DHA leadership and key stakeholders.

Training, Mentorship & Workforce Development

• Mentor and develop CSSP team members, fostering a culture of continuous improvement and cybersecurity excellence.
• Lead cybersecurity training initiatives to enhance workforce capabilities, ensuring alignment with DoD 8570.01-M and NICE Cybersecurity Workforce Framework.
• Ensure CyOC personnel maintain required DoD certifications and participate in professional development opportunities.