THIS POSITION IS CONTINGENT UPON CONTRACT AWARD.

SUMMARY OF POSITION:

This position is contingent upon award – The Defensive Cyberspace Operations (DCO) Analyst position requires an understanding of security related system controls and an understanding of the various Government security policies including NIST SP 800-53A and DoD 8570.

ESSENTIAL JOB FUNCTIONS: (not limited to duties as described – performs related duties as requested)

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill and ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. Analyze approved concepts and doctrine for the purpose of developing DOD DCO related universal tasks and determining DCO capability gaps.

• Conduct research and analysis across multiple sources in order to establish the foundation for required DCO capability and architecture development, identify capability gaps, and generate DOTMLPF-P solutions such as doctrine (principles and tactics, techniques, and procedures (TTPs)) development, organizational design changes, training initiatives, materiel solutions, leadership and education requirements, personnel solutions, and facilities renovation and design.
• Assist with capability needs analyses (CNA) to assess the DOD's ability to perform future DCO missions as defined by joint and Army concepts considering existing and programmed solutions. Identify baseline joint and Army DCO capabilities; assesses and recommend priorities for capabilities based upon risk to mission success if not performed; assess accommodation of DCO capabilities given programmed DOTMLPF-P solutions resourced over the budget years; assess and recommend priorities for DOTMLPF-P solutions. Identify, assess, and recommend priorities for macro-level gaps given the current level of funding. Coordinate results of analyses that support recommendations to key stakeholders and senior leadership.
• Produce assessments which include results from studies, experimentation, war gaming, analyses, and testing and simulations in order to determine what DOTMLP-P solutions are necessary to fill capability gaps for the future force as required.
• Plans, prepares, executes, and leads action officer and senior-level conferences, meetings, workshops, and reviews in support of ongoing programs/projects related to CDID Cyber roles and responsibilities for developing capabilities for the Cyber Mission Force and overall cyberspace workforce. Present CM Cyber positions at conferences, boards, committees, panels, working groups, reviews and other forums as deemed appropriate.
• Develops information materials, provides analysis and presentations in support of all DCO capability development efforts. Serves as a subject matter expert for integrating DCO concepts into DOD Warfighting Requirements. Collaborates with proponent sponsors and HQDA, FORSCOM, USCYBERCOM, Joint Staff, and Combatant Commands for DCO capability development. Conducts comprehensive analysis to ensure that the integration of DOTMLPF-P factors are adequate to support current and emerging warfighting systems. Analyze changes in joint and other services’ cyberspace/electronic warfare and related doctrine and techniques to determine impact on DOD operational capabilities. Coordinates analysis results that support recommendations with key stakeholders and presents findings to CM Cyber.
• Produces concepts of operation, operational mode summaries/mission profiles, basis of issue guidance, and system training plans for systems within his/her area of focus.
• Collaborates with the designated Program Management (PM) Office in the development of System Engineering Plans and Test and Evaluation Management Plans – assisting the PM with the identification and assessment of essential elements of analysis; and acts as a member of a team consisting of functional, training, operational and T&E experts to execute the post-deployment assessment. Ensures final solution is fielded in accordance with approved fielding strategy.
• Develop current and future cyberspace analytic requirements including identification and collection of large volumes of data to build and enhance cyber security processes and systems.
• Develop a security architecture that processes information of various levels of sensitivity.
• Perform gap analysis to identify any gaps between security requirements and the architecture of the system and provide documentation of the results, to include recommendations on appropriate architecture changes.
• Advise and consult with external organizations for the architecture, design, implementation, and deployment of security systems. Research and evaluate security technologies to be used in future DOD security architecture. The security architecture work will include network security, network defense, operating system security identity, authentication and authorization, data protection, application security, activity audit and monitoring, mobile computing security, and partner/vendor access to corporate systems/data.
• Determine and develop critical drivers for experimentation/assessments (to include operational threads, applicable scenarios, and learning demands).

LEVEL OF SUPERVISION:

• Must be able to function independently.
• Provide supervision, overview, and general use training to all organization members and key leaders upon request.

EDUCATION & EXPERIENCE: (OR EQUIVALENT)

• Candidate should possess technical, operational, and policy expertise in DCO with focus on cyberspace analytics, cloud computing operating systems (e.g. OpenStack and VMWare), DCO tools (e.g. Security Onion, Cobalt Strike, Python, Google Rapid Response, and Kali Linux), user activity monitoring (e.g. Innerview), forensics and malware analysis (e.g. Forensic Tool Kit and EnCase), DCO mission planning, advanced sensors, and threat emulation)
• Possess a minimum of three (3) years of experience in conducting defensive cyberspace operations in support of USCYBERCOM, INSCOM, Army Cyber Command or NSA cyberspace operations.
• Two (2) years of experience with force modernization efforts such as capability development, materiel development, requirements determination/development, and/or force development is preferred but not required.
• Possess, a bachelor’s degree or higher. Degree will have a focus in computer science, information technology, information systems management or computer programing.
• In lieu of aforementioned computer science related bachelor’s degree, a bachelor’s degree of any kind along with seven years’ experience in DCO.

LICENSE & CERTIFICATIONS:

• Must be certified in one or more IAT Level III certifications (CISA, GSE, SCNA GCIH, CISSP).
• Additionally, must be certified in computer network defender service provider (CNDSP) analyst, CNDSP Infrastructure Support, CNDSP incident responder, CNDSP auditor, or CNDSP manager accordance with 8570.1M.

KNOWLEDGE & SKILLS:

• Ability to organize, prioritize and meet deadlines
• Capable of conveying complex information in a simplistic manner
• Strong critical thinking and problem-solving skills
• Strong self-starter requiring minimal supervision
• Able to take proactive measures to prevent problems rather than reactive by nature
• Strong verbal and written communication to effectively express concepts, plans, and proposals
• Must be a U.S. Citizen

PHYSICAL DEMANDS/WORKING ENVIRONMENT:

• See Workfit or Physical Demands Job Analysis

TRAVEL REQUIRED:

• NA

SECURITY CLEARANCE: Must possess a Top-Secret security clearance and upon award be immediately eligible for nomination to receive Special Compartmented Information (SCI) access.

 IAP IS AN EOE, INCLUDING DISABILITY/VETS.  

ALL QUALIFIED APPLICANTS WILL RECEIVE CONSIDERATION FOR EMPLOYMENT WITHOUT REGARD TO RACE, COLOR, RELIGION, SEX, SEXUAL ORIENTATION, GENDER IDENTITY, NATIONAL ORIGIN, DISABILITY, OR STATUS AS A PROTECTED VETERAN. 

Required Skills Required Experience

PROFESSIONAL QUALIFICATIONS/SKILLS:

• Must be a US citizen and possess or be able to obtain/maintain a Top Secret clearance;
• Must possess a Bachelor's degree, or ten years of subject matter-related work experience; an advanced degree is preferred, but not mandatory;
• Demonstrated management and administrative experience in the delivery of law enforcement, military and/or crisis management training and exercises;
• Expert knowledge of and demonstrated successful experience with AT/CME theories, concepts, principles, practices, and applications;
• Experience in law enforcement and/or military training is preferred, but not mandatory;
• General knowledge and experience in counterterrorism investigations and various facets of training associated with special weapons and tactics such as firearms, explosive ordnance disposal, sharpshooter/observer, tactical planning, incident management, or any other specialty field(s) of training associated with national counterterrorism forces or quick reactionary force tactical teams are preferred;
• Working knowledge of the organization of the Department of State, the functional responsibilities of individual components of the Department and US embassies, and understanding of the Bureau of Diplomatic Security’s overseas security operations is preferred;
• Knowledge of adult learning principles and training methods to be used in the design, conduct and management of pre-exercise training and exercise programs is preferred;
• Knowledge and skill in application of event evaluation methodologies; ability to provide advice, guidance, and consultation to officials with regard to the interpretation and application of AT/CME evaluations;