Cyber Defense Sustainment Engineer (TS/SCI)

About the role

V2X, part of the USARCC-SWA Defensive Cyber Operations (DCO) division, is looking for a Cyber Defense Sustainment Engineer with strong scripting abilities, systems security administration and network security experience. The engineer designs, implements, automates, maintains and optimizes measures protecting systems, networks and information. The role sits in a 24-hour facility and includes incident response, incident handling and cyber threat analysis.

Key responsibilities

• Develop and maintain applications supporting DCO activities such as incident response, investigation and reporting.
• Manage and monitor IDS/IPS sensor grids (e.g., McAfee, Sourcefire, Netscout) and coordinate network operations, maintenance, repairs and upgrades.
• Analyze cyber threat reports and recommend defense mitigation measures; monitor security alerts and logs to detect and triage incidents.
• Perform trend analysis on events and incidents, conduct open-source research on exploits and vulnerabilities including Zero-Day threats, and assist in CDAP missions as requested by clients.
• Use Splunk to monitor network performance and data I/O reports, and prepare network specifications including diagrams and equipment configurations.
• Research and test new hardware or software, and mentor junior team members.
• Ensure compliance with regulatory requirements, industry standards and organizational policies, and collaborate with IT, security operations, legal and senior management.

Required profile

• Active Top Secret clearance with SCI; candidates must meet host-country requirements, including a host nation visa and driver's license.
• Bachelor's degree or equivalent experience, preferably in Computer Science, MIS, IS, Engineering or a related field; one year of related experience may substitute one year of education.
• At least five years of practical experience with network and system data technologies, with at least two years focused on information systems security, cyber threats and SIEM event analysis.
• Adherence to DoD 8570.01M, with at least one baseline certification and one computing environment certification.

Required skills

• Splunk for SIEM and log analytics.
• IDS/IPS, perimeter defense, endpoint security sensors and network device administration.
• Threat intelligence and visualization technologies.
• Ability to troubleshoot servers and infrastructure equipment and assess networking requirements.

What we offer

• Company-paid housing and transportation.
• Completion bonus and tuition reimbursement program.