ECS is seeking a Cybersecurity Analyst (CDAP) - Senior to support the Army National Guard (ARNG) Enterprise Network Operations and Cybersecurity Support (ENOCS) program. This position supports Task 3 — Cybersecurity Operations Support, contributing to a comprehensive and proactive cybersecurity program that defends ARNG classified and unclassified network environments and enables Defensive Cyberspace Operations – Internal Defensive Measures (DCO-IDM) across the DoDIN-Army-NG area of responsibility. The Cybersecurity Analyst (CDAP) performs monitoring and analysis of security telemetry within CDAP, conducts alert triage and log analysis, documents findings, supports remediation tracking, and assists with dashboard updates and detection tuning in coordination with SOC and defensive cyber personnel.
In this role, the analyst helps protect mission-critical enterprise services supporting more than 120,000 users and approximately 141,000 endpoints across roughly 2,800 sites in 54 states and territories. The position operates within the ARNG cyber mission supporting Title 10 and Title 32 operations, mobilization readiness, domestic emergency response, and both classified SIPRNet and unclassified environments. The role aligns with ENOCS cybersecurity operations that leverage integrated SIEM/C2C/DLP analytics, USIEM data sources, MITRE ATT&CK-based analytics, and coordination with the NETCOM Global Cyber Center and DISA DCDC to strengthen continuous monitoring, threat detection, and ARNG cybersecurity policy compliance.
Please Note: This position is contingent upon contract award.
Responsibilities- Monitor and analyze CDAP security telemetry to identify potential threats, anomalous activity, and security misconfigurations affecting ARNG classified and unclassified network environments.
- Perform alert triage, log review, and basic correlation using established analytic rules to support Task 3 cybersecurity operations and continuous monitoring objectives.
- Document investigative findings, maintain clear records of observed conditions, and support remediation tracking in coordination with SOC and defensive cyber personnel.
- Assist with dashboard updates to improve visibility into cyber conditions, incident trends, and operational status across the DoDIN-Army-NG area of responsibility.
- Support detection tuning under senior oversight to improve the quality and relevance of cyber alerts and monitoring outputs within CDAP.
- Contribute to monitoring activities that align with integrated SIEM/C2C/DLP analytics and USIEM-enabled visibility used to centralize threat detection and response.
- Apply established analytic approaches that support MITRE ATT&CK-based detection and analysis methods used across ENOCS cybersecurity operations.
- Coordinate with cybersecurity operations stakeholders supporting 24x7x365 monitoring, incident escalation, and defensive actions in concert with broader SOC processes.
- Support cybersecurity activities performed in coordination with the NETCOM Global Cyber Center and DISA DCDC to help maintain ARNG cyber freedom of action and policy compliance.
U.S. Citizenship is required
Security Clearance: Secret Eligible
Required Certifications: DCWF Work Role 511-Cyber Defense Analyst — Basic proficiency; must hold ONE OR MORE of the following: CC, CEH, GFACT, GISF
Experience: 3+ years of experience in cybersecurity
- Experience monitoring security events, alerts, and logs to identify suspicious activity, misconfigurations, or indicators requiring further analysis.
- Experience documenting findings and maintaining remediation or follow-up actions with accuracy and attention to detail.
- Familiarity with continuous monitoring activities supporting DoD and ARNG cybersecurity policy compliance.
- Ability to support dashboard maintenance and reporting used to communicate cybersecurity status and trends.
- Experience working with SOC or defensive cyber personnel in an operational cybersecurity environment.
- Familiarity with security telemetry analysis and rule-based alert correlation.
- Ability to support cybersecurity operations across both classified and unclassified environments.
- Familiarity with MITRE ATT&CK-based analytic methods and SIEM-driven monitoring concepts referenced in the ENOCS environment.
Skills Required
- 3+ years of experience in cybersecurity
- U.S. Citizenship
- Security Clearance: Secret Eligible
- Certifications: CC, CEH, GFACT, GISF
ECS Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about ECS and has not been reviewed or approved by ECS.
-
Healthcare Strength — ECS advertises multiple national-network medical plan options with HSA eligibility alongside dental and vision coverage. Coverage generally begins quickly and is paired with company-paid short- and long-term disability, adding stability to the health package.
-
Retirement Support — A 401(k) with Safe Harbor and immediate vesting on employer contributions is emphasized, with an employer match available. Access to an employee stock purchase plan via the parent company provides an additional savings avenue.
-
Parental & Family Support — Paid parental leave up to 30 days, adoption assistance, and other family-oriented leaves are highlighted. Feedback suggests these offerings add meaningful value beyond base pay for many roles.
ECS Insights
What We Do
ECS, a segment of ASGN (NYSE: ASGN), delivers advanced solutions and services in cloud, cybersecurity, artificial intelligence (AI), machine learning (ML), application and IT modernization, and science and engineering. The company solves critical, complex challenges for customers across the U.S. public sector, defense, intelligence and commercial industries. ECS maintains partnerships with leading cloud, cybersecurity, and AI/ML providers and holds specialized certifications in their technologies. Headquartered in Fairfax, Virginia, ECS has more than 3,400 employees throughout the U.S. and has been recognized as a Top Workplace by The Washington Post for the last five years.
.png)
