Teams at Sentar Inc.

Provides cybersecurity tool support across the Defense Health Agency enterprise network. Analyzes vulnerability scans, endpoint security, configuration-management, compliance, and authorization data; identifies coverage and documentation gaps; coordinates with system points of contact; supports compliance with NIST, DoD, DHA, STIG, and SRG requirements; assists with system artifacts, training, troubleshooting, and SOP maintenance.

Monitors and triages cybersecurity alerts, validates and documents incidents, performs endpoint and network intrusion detection, reviews logs using Splunk, gathers basic forensic artifacts, and escalates complex investigations to Tier 2 personnel. Maintains SOP and compliance documentation, supports incident response operations, recommends tuning to reduce false positives, and contributes to operational reporting. The role provides 24/7 support across rotating shifts and may require up to 10% travel.

Develops and tunes cybersecurity detection use cases based on current threats, MITRE ATT&CK, and government guidance. Reviews SIEM/SOAR alerts, reduces false positives, identifies logging and detection gaps, supports log ingestion and data normalization, and creates correlation rules, signatures, filters, and automations for defensive cyberspace operations.