Senior Cyber Threat Emulation Analyst IRES - SSFB/HSV

Position Title: Senior Cyber Threat Emulation Analyst

Location: Schriever Space Force Base, Colorado Springs, CO or Redstone Arsenal, Huntsville, AL

Relocation Assistance: None available at this time

Remote/Telework: NO - Not available for this position

Clearance Type: DoD Secret 

Shift: Day shift 

Travel Required: Up to 10% of the time

Description of Duties:

The Senior Cyber Threat Emulation Analyst supports the Missile Defense Agency (MDA) on the Integrated Research and Development for Enterprise Solutions (IRES) contract. The candidate will:

·       Perform Defensive Cyber Operations (DCO)/Cyber Security Service Provider (CSSP) duties outlined in Evaluator Scoring Metrics (ESM).

·       Perform cybersecurity duties on customer networks (proactively and reactively) to improve enterprise-wide security posture.

·       Analyze correlated assets, threat, and vulnerability data against known adversary exploits and techniques to determine impact and improve network defensive posture.

·       Support the development, establishment, review and update of DCO procedures, processes, manuals, and other documentation.

·       Provide standardized and targeted training in support of MDA CSSP-CERT Subscriber vulnerability management programs.

·       Measures effectiveness of defense-in-depth architecture against known vulnerabilities.

·       Generate vulnerability assessment reports for customers and escalate for further review.

·       Support Incident Response across the enterprise IAW DoD regulations and instructions.

·       Support cyber events and incident investigations from start to conclusion, to include gathering data, analysis, and reporting.

·       Develop an Exploitation Analyst training plan by instructing, evaluating, and mentoring junior, mid, and senior analysts.

·       Receive, review, and implement directed Higher Headquarters Tasking Orders (HHQ) and/or Fragmentary Orders.    

·       Perform Cyber Threat Emulation (CTE) actions with Automated Security Validation (ASV) toolset as directed by HHQ

·       Execute HHQ directed and custom CTE actions with specific adversary tactics, techniques, and procedures (TTPs) to assess toolset detection and alerting.

·       Create custom dashboards and reports to communicate post engagement analysis of each CTE engagement, including identified vulnerabilities, recommended remediation steps, assessment of the system's security posture, and incident response to government within a specified amount of time after completion of engagement.

·       Draft and submit Cyber Tasking Orders (CTOs) to remediate issues found in report finding during CTE actions.

·       Collaborate with the Vulnerability Assessment and Cyber Defense Teams to develop evaluation criteria and methodologies aligned with HHQ inspection requirements and industry best practices.

·