Defensive Cyber Operations Analyst

SAIC is seeking a Defensive Cyber Operations Analyst to support the Portsmouth Naval Shipyard (PNSY) Information Technology Programs for the Dept of the Navy. This initiative leverages advanced technologies and integrates critical defense systems to optimize ship maintenance through IT applications, systems, and training, ensuring sustained mission success in naval ship maintenance operations.

ROLE: Actively monitor, detect, and respond to cybersecurity threats and incidents within an organization. Utilize advanced security tools and technologies, such as Host-Based Security System (HBSS) and Security Information Event Management (SIEM) platforms, to continuously monitor network traffic, identify vulnerabilities, and detect suspicious activities. Conduct thorough investigations of security incidents, implement incident response protocols, and coordinate remediation efforts to mitigate potential risks. Collaborate with IT teams to enforce security policies, deploy updates, and ensure the overall integrity and confidentiality of information systems. Provide expert analysis on emerging threats, recommend proactive security measures, and contribute to the development of robust cybersecurity strategies. Play a critical role in maintaining a secure operational environment by ensuring rapid identification and response to cybersecurity threats. Utilize DoD standard software tools to conduct vulnerability scans and assist local Systems Administrators in maintaining positive Vulnerability Management (VM) control of systems. Additionally, demonstrate expertise in supporting Navy Risk Management Framework (RMF) compliance and the process of obtaining and maintaining Authorization to Operate (ATO) for Navy systems.

Demonstrated experience with the Navy Risk Management Framework (RMF) process and the ability to support the RMF lifecycle to ensure adherence to cybersecurity standards and best practices

Experience in obtaining and maintaining Authorization to Operate (ATO) for Navy systems

Proficiency in utilizing DoD standard software tools to conduct thorough vulnerability scans on network equipment

Experience assisting in the maintenance of positive Vulnerability Management (VM) control and configuring, operating, troubleshooting, and maintaining endpoint security technologies, including Host-Based Security System (HBSS)

Skills in supporting the identification, protection, detection, response, and recovery of cybersecurity incidents, and coordinating incident response and reporting processes

Familiarity with configuring and maintaining Security Information Event Management (SIEM) sensor platforms

Capable of working under the direction and supervision of senior personnel, contributing to maintaining VM and endpoint compliance

REQUIRED CERTIFICATION: CompTIA Security+

REQUIRED CLEARANCE: Active Secret clearance

DESIRED CERTIFICATION: Certified Ethical Hacker (CEH), Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP)