IT Systems Analyst V (AFCAT) Endpoint Security Solutions (ESS)

This position supports the Air Force Cyber Assessment Team (AFCAT) in the 688th Cyberspace Wing and conducts Cyber Operational Readiness Assessments (CORA) at Air Force locations around the world. These assessments will help strengthen the posture and resiliency of the DoW Information Network (DOWIN) by supporting commanders and directors in their efforts to harden their information systems, reduce the attack surface of their cyber terrain, and enhance a more proactive defense.

Team members will specialize in Cyber Operational Readiness Assessments (CORA), focusing on areas such as endpoint security, network vulnerability, insider threat, and more. This role helps ensure Air Force compliance and effectiveness in cyber defense strategies.

• Determine, in conjunction with supervisor, the technology areas to focus personal training on and when to enter the program for required training

• Contractor shall obtain DCDC certification ESS: Security Fundamentals Professional Certification (SFPC) and complete required assessments and evaluations. Training must be completed no more than six months prior to the On-the-Job Training (OJT), check ride, and assessments

• Ensure all certification requirements are up to date, including a minimum of 4 assessments per technology area each fiscal year

• Contractor shall utilize appropriate tools and methodologies based on DCDC standard processes and procedures

• Stay informed on 688 CW/CC, AFCYBER/CC, and larger Air Force strategic priorities to inform base selection for CORAs

• Advocate with wing organizations for access to enterprise assets and capabilities to prepare for CORA

• Support daily assessment meetings to track progress and provide summaries to base leadership and 688 CW leadership

• Complete assessment checklists as required

• Participate in regular teleconferences with base comm squadron leadership to identify issues and inform commanders on risk

• Provide written feedback on process update recommendations

• Coordinate travel arrangements with fellow assessment team members

• Complete supervisory and administrative tasks as required

• Complete other duties as assigned

• Validate firewall configuration across multiple servers

• Utilize tools that enforce network access control (i.e. Cisco, Forescout)

• Review audit logs, logging and account management policies

• Utilize appropriate assessment tools and methodologies based on DCDC standard processes and procedures

• Conduct technical evaluations of MDE and Trellix ESS configurations against established security baselines (e.g., STIGs, SRGs) and industry best practices

• Requires a bachelor's degree (or equivalent) +5 years of experience, or 8+ years of related experience

• Must have excellent verbal and written communication skills

• Must have excellent critical thinking skills

Desired:
• Experience with Microsoft Defender for Endpoint (MDE)

Required:

• IAT II – Sec+, CASP+, or higher

Desired:

• Microsoft Certified: Windows Server Hybrid Administrator Associate

• Oracle Database SQL Certified Associate Certification

• Certified Protection Professional (CPP)

• Microsoft Certified Security Operations Analyst Associate

Required: Must have active Secret clearance with ability to obtain a Top-Secret clearance with SCI eligibility

Desired: Active Top Secret Clearance with SCI eligibility

• Anticipate team members travelling 6 to 7 weeks per year but could be more or less

• Must possess or obtain a US Passport within 6 months

• Must be able to fund your travel up front and you will be reimbursed upon filing expense report