Description
We are seeking a Countermeasures Engineer to support the DISA DECO Task Order 22 Network Assurance (NA) Program. As a Countermeasures Engineer, you will refine and maintain the defence of Cross Domain Enterprise Services (CDES) infrastructure, engaging with customers, anticipating their needs, and delivering flawlessly.
The successful candidate will demonstrate a strong understanding of Cybersecurity fundamentals, threat actor TTP frameworks such as the MITRE ATT&CK framework, and developing and deploying Cybersecurity threat detection and mitigation rules and analytics.
Primary Responsibilities:
- Establish baseline security relevant data in accordance with NSA National Cross Domain Services Management Office (NCDSMO) Raise the Bar (RTB) standards.
- Maintain integrity and efficacy of customer configurations; establish baseline customer configuration as part of onboarding; work with the customer to track changes to the infrastructure.
- Work with primary monitoring centers to validate access to data and CDES index/indices with a SIEM.
- Collaborate with other teams to apply threat intelligence to the development of analytics and countermeasures; develop analytics and countermeasures.
- Track and make recommendations for RTB compliance by DISA and mission partners.
- Keep abreast of RTB standards; work with the DISA CDES office and NCDSMO to understand changes to the standards; determine changes needed by DISA CSSP to assist with compliance.
- Work with peer teams to establish data health/monitoring dashboards.
Basic Qualifications:
- Active DoD Secret security clearance or higher (program can support up to TS)
- Bachelor's degree from an accredited college in a related discipline with 4+ yrs of professional experience; additional or equivalent experience can be substituted in lieu of a degree.
- Knowledge of Cyber Network Defense (CND) with regards to protect, detect, respond and sustain within a Computer Incident Response organisation.
- Ability to work independently in a high visibility, frequently changing environment.
- Understanding of enclave-level networking and sensor technologies.
- Understanding of Endpoint Detect and Response (EDR) technologies.
- Active DoD-8570 IAT Level 2 baseline certification (Security+ CE) at start date.
- Motivated self-starter with strong written and verbal communication skills.
Preferred Qualifications:
- Experience with DISA and DoD Networks.
- User-level experience with Microsoft SharePoint.
- Privileged-user level experience with Microsoft Azure and the Microsoft Defender Suite of tools.
- Microsoft AZ-104, AZ-500, and SC-200 certifications, or other Microsoft Azure and Defender-related certifications.
- Experience developing scripts in Python and PowerShell.
- Advanced Certifications such as SANS GIAC/GCIA/GCIH, CISSP, CCNA, CCNP or CASP.
- Experience in intelligence driven defence.
- Experience with DOD accreditation.
Pay Range: $107,900.00 - $195,050.00