What are the responsibilities and job description for the Cyber Defense Operator – Intermediate position at Viranim Technical Solutions?
Job Description:
The ability of the AFIN SOC to complete its mission is dependent upon accurate, timely and thorough near real‐time network security monitoring and analysis of the Air Force network/systems DCO events.
-Review all IDS/IPS alerts per AFIN SOC Operating Instruction and checklists at the AOL, COOP, or Ops Floor. Conduct host security monitoring, alert review, and intrusion detection analysis for the AFIN‐SOC mission.
-Develop, Review and Maintain procedures related to the overall monitoring of
Hosts/Systems.
-Comply with 3rd party MOU/MOA monitoring and reporting requirements. Analyze host DCO events to determine the necessity for higher level analysis and conduct an initial assessment of type and extent of intruder activities.
-Monitor security sensors to analyze Intrusion Detection Systems and Security Information and Event Management to identify and correlate security issues/events and review logs to identify intrusions for remediation. Correlate suspicious events with network events, if possible, and data stored within databases and other external DoD resources, including but not limited to Big Data Platform.
-Analyze traffic/logs/events to determine the necessity for higher level analysis and conduct an initial assessment of type and extent of intruder activities.
-Record who, what, where why and when for any identified suspicious activity in case management system case to enable additional investigations.
-Conduct triage of suspicious activity alerts and logs in order to make a fast and accurate triage decision.
-Enter event data into mission support systems in accordance with AFIN SOC
operational procedures and reports.
-Provide monthly performance metrics including but not limited to readiness, qualifications, events processed, CAT events and incidents identified.
-Escalate security incidents using established policies and procedures.
Required:
GCFA
Must have or be able to obtain and maintain a Department of Defense Top Secret SCI Clearance