SOC Defensive Cyber Operations (DCO) Analyst Jr.

## SOC Defensive Cyber Operations Jr.

**Job Details:**

**Security Clearance**: Active TS/SCI

**Job Location:** Schriever Space Force Base, CO – On Site

**Position Type:** Full Time

**About ITI Solutions, Inc.**

ITI Solutions, Inc. is a Service-Disabled Veteran-Owned Small Business (SDVOSB) with a strong track record supporting Department of Defense (DoD) programs, including U.S. Army vehicle production, sustainment, and modernization efforts.

Founded by a Service-Disabled Veteran, we bring mission-driven expertise in engineering support, logistics coordination, and program execution to critical national defense initiatives.

As an Equal Opportunity Employer, ITI Solutions is committed to fostering a diverse, inclusive, and respectful workplace. We do not discriminate in employment decisions on the basis of race, color, religion, national origin, sex, gender, gender identity, sexual orientation, age, disability, protected veteran status, genetic information, or any other characteristic protected by applicable federal, state, or local law. We are dedicated to providing equal employment opportunities to all applicants and employees and maintaining a work environment that is free from discrimination and harassment.

**Overview of position:**

ITI Solutions seeks a SOC DCO Cyber Analyst to support cyber operations at Schriever SFB. The candidate must be willing to work 12-hour shifts on a fixed 4-on, 3-off, and 3-on, 4-off schedule, either day or night shift.

**Responsibilities:**

• Analyze cyber incidents, correlate incident details, and formulate response actions
• Provide recommendations on tuning and maximizing the capability of existing tools while suggesting additional tools to enhance capability
• Monitor government-provided Defensive Cyber Operations (DCO) tools and systems
• Conduct after-action processes to capture efforts taken to mitigate unauthorized actions
• Participate in the development of DCO Tactics, Techniques, and Procedures (TTPs)
• Assist in the development of DCO concept of operations, processes, and procedures
• Identify security discrepancies and report security incidents
• Provide expert research and analysis in support of expanding programs and areas of responsibility

## Qualifications

**Required Qualifications:**(Must have one of the Foundational Qualification Options below)

Education: BS degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science, from an ABET-accredited or CAE-designated institution

Or one or more of the following trainings

DOD/Military Training: WCYBER200, 230-25D30 (CP), M09CVQ1, CYB 5640/CYB 5640V/WSS 010, M03385G, M10395B, M223854, A-150-1980, A-150-1202, A-150-1203, A-150-1250, A-531-0451, A-531-4421, A-531-1900, WSS 011, DISA-US1377,1203, A-150-1250, A-531-0451, A-531-4421, A-531-1900, WSS 011, DISA-US1377, 4-11-C32-255S (CP), 4C-255N (CP), 4C-255A (CP), M0923W1, A-531-0045, A-531-0022, A-531-4417, WSS 012

Or one of the following DoDM 8140.03 certifications

Certifications: CEH, GFACT, GISF, Cloud+, GCED, PenTest+, Security+, GSEC, CySA+, CBROPS, CFR, FITSP-O, GCIA, GDSA, GICSP, or GCFA

**Preferred Qualifications:**

• Prior Defensive Cyber Operations or Cyber Analyst experience
• Prior Cybersecurity Service Provider (CSSP)/SOC experience
• Familiarity with Space Operations is highly desired.
• 0-3 years of CSSP/SOC Cyber Analyst type work experience in a DoD cybersecurity environment

**Experience/Skills:**

Experience performing Cyber Threat Hunting, Participating in cyber exercises, Cyber Incident Response, Intrusion Detection, and Continuous Cybersecurity Monitoring

Provide expertise for DCO-Space capabilities, to include Security Incident and Event Management (SIEM); Intrusion Detection and Prevention Systems; ELK (Elasticsearch, Logstash, and Kibana) Stack; Endpoint Protection Systems; Security Orchestration, Automation and Response (SOAR); Firewalls; Log Aggregator; Protocol Analyzers; Vulnerability Assessment Tools

Hands-on experience with the following tools

Elastic Stack, Teleseer, Kibana, Suricata, Wireshark, Splunk, Snort, Carbon Black, Bro/Zeek logs, TCPdump, editcap, ACAS, Bash scripting, Python, or Microsoft Office 365

Clearance: Active TS/SCI clearance is required, Must be a United States Citizen and pass a background check

Maintain applicable security clearance(s) at the level required by the client and applicable certification(s) as required by DODM 8140.03 (Cyberspace Workforce Qualification and Management Program), and additional training as requested by and/or required by ITI Solutions, Inc.

ITI Solutions, Inc. is a fast-growing business that develops and tailors advanced Engineering, Cybersecurity, Information Technology, Intelligence Support, and Training Services to resolve our clients’ complex challenges and exceed delivery expectations.