Cyber Operator (CPT) - Network

Title: Cyber Operator (CPT) - Network

Location: Scott AFB

Clearance: TS/SCI

Program: DCRIOS

Company Description:

Centuria, a Service-Disabled Veteran-Owned Small Business (SDVOSB), has been delivering IT, Engineering, and Scientific solutions to the Federal Government since 2002. The Washington Post has recognized Centuria Corporation as one of the top workplaces in the DC Metro area for 2024. This award celebrates companies that make the world a better place to work together by prioritizing a people-centered culture and giving employees a voice.

The Washington Post has recognized Centuria Corporation as one of the top workplaces in the DC Metro area for 2024. This award celebrates nationally recognized companies that make the world a better place to work together by prioritizing a people-centered culture and giving employees a voice. The Top Workplaces USA award is based entirely on feedback from an employee engagement survey completed by the employees of participating workplaces. Centuria is honored to have been awarded this distinction.

Position Description:

Being a cybersecurity operator supporting the 67th Cyber Wing (67 CW), tasked with hunt and clear missions is a dynamic and high-stakes role that combines cutting-edge technology with tactical precision. These elite professionals conduct cyber threat hunting - navigating complex military and allied networks, uncovering hidden vulnerabilities, performing tactical forensic analysis, and identifying bad state and non-state actors. This is a small and unique team that offers high end cybersecurity professionals with the opportunity to significantly impact national security. 

•  Serve on a Cyber Protection Team (CPT) in a Cyber Security Network Analyst position.

•  Conduct cyber threat hunting, network navigation, tactical forensic analysis, forensic collection of digital artifacts and other valuable operational data, and when directed, execute operations in support of defensive initiatives.

•  Provide support for persistent monitoring of all designated networks, enclaves, and systems.

•   Interpret, analyze, and document findings in reports in accordance with computer network directives, including initiating, responding, and reporting discovered events.

•  Manage and execute first-level responses and address reported or detected incidents.

Position Requirements:

·        TS/SCI – Eligible; Top Secret with the ability for SCI nomination

·        Two (2) or more years’ experience in cyber security required. 5+ years of experience in cyber security is desired.

·        DoD 8570 IAT Level III certification (current)

o   CompTIA Advanced Security Practitioner+ Continuing Education (CASP+ CE),

o   Cisco Certified Network Professional (CCNP) Security, Certified Information Systems Auditor (CISA),

o   Certified Information Systems Security Professional (CISSP) (or Associate),

o   GIAC Certified Enterprise Defender (GCED),

o   GIAC Certified Incident Handler (GCIH),

o   Certified Cloud Security Professional (CCSP)

·        General knowledge of physical computer components and architectures, including the functions of computer domains, directory services, various components and peripherals, basic programming concepts, assembly codes, TCP/IP, OSI models, underlying networking protocols (e.g., DNS, ARP, etc.), security hardware and software

·        Strong knowledge and understanding of TCP/IP, routing protocols, access control models and network security.  Familiarity with load balancing, cloud networking models and high availability configurations.

·        Experience with encrypted and unencrypted remote access technologies, such as RDP, SSH, VPN, Telnet, and FTP

·        Provide support for persistent monitoring of all designated networks, enclaves, and systems.

·        Interpret, analyze, and document findings in reports in accordance with computer network directives, including initiating, responding, and reporting discovered events.

·        Experience with toolsets such as the Elastic Stack, Arkime, Zeek, Wireshark, Metasploit, tcpdump, NMap, Nessus, Snort, EnCase, and Forensic Toolkit

·        General knowledge of cyber security frameworks, such as the Cyber Kill Chain, MITRE ATT&CK, and the NIST 800 series

·        Proficient in collecting and analyzing digital data, recording detailed notes, and documenting findings in reports

·        Candidate must be self-motivated and able to perform with minimal supervision

·        Travel may be required up to 25%

·        Possess, or be willing to obtain within 6-months of start date, an additional certification related to your specific role (Network)

Preferred Skills/Qualifications:

•     Network related certification (i.e., Network+, CCNA, GCIH, etc.)

•     Knowledge of distributed systems, process control, advanced routing, wireless, cloud, telecom and datacom platforms

•     Knowledge of virtualization concepts, technologies and tools, such as VMware/Virtual Box, Docker, Kubernetes, and Ceph

•     Familiarity with Cloud Computing concepts, technologies, and tools, such as AWS, Azure, and Google Cloud

•     Experience programming in C, C++, C#, Ruby, Perl, Python, SQL