CSSP Analyst - Journeyman

Overview of position:

FEDITC is seeking a CSSP Analyst, Journeyman provide continuous cybersecurity monitoring, threat analysis, and incident response support for the DFAS Common Computing Environment (CCE). This position is responsible for monitoring security events, investigating potential threats, analyzing phishing attempts, and performing initial incident triage and classification. The role also supports threat hunting, incident reporting, and security documentation across classified and unclassified networks to ensure compliance with DoD cybersecurity requirements and DFAS incident response procedures.

A United States Citizenship and an active Top-Secret DoD Security Clearance is required to be considered for this position.

Responsibilities

• Provide 24/7 security monitoring and analysis for DFAS CCE (ON-SITE REQUIRED)
• Monitor security events using Azure Sentinel, ArcSight, and other SIEM tools
• Perform initial triage and classification of security incidents
• Analyze phishing and spam emails, reviewing headers, attachments, and URLs for malicious indicators
• Validate and classify incidents, determining true positives and escalating when required
• Draft incident summaries and analyst reports for leadership and case records
• Keep investigation notes and case records updated
• Support protocol monitoring achieving 100% documentation per DFAS CSIRP
• Participate in threat hunting activities under senior guidance
• Operate CSSP toolsets for unclassified and classified enclaves

Experience/Skills:

• 5+ years cybersecurity/SOC analyst experience
• Security+ certification
• DoD 8140 Cyber Defensive Analyst (Intermediate) Playlist qualification
• Experience with SIEM tools (Azure Sentinel, ArcSight, Splunk)
• Knowledge of phishing analysis and email security
• Incident triage and classification experience
• Understanding of network security monitoring
• Familiarity with DFAS CSIRP or similar incident response procedures
• Experience with ticketing systems for incident tracking

Preferred Qualifications:

• CySA+ certification (upgrade path)
• Experience with DFAS CSSP operations
• Prior 24/7 SOC shift experience
• Azure Sentinel KQL query experience
• Threat hunting experience
• Digital forensics fundamentals
• Experience with classified network monitoring

Education:

• Bachelor’s degree in Computer Science, Engineering, Information Technology, or a related field

Certifications:

• Cyber Defensive Analyst (Intermediate) Playlist
• CompTIA Security+

Clearance:

• Active Top-Secret clearance is required.
• Must be a United States Citizen and pass a background check.
• Maintain applicable security clearance(s) at the level required by the client and/or applicable certification(s) as requested by FEDITC and/or required by FEDITC’S Client(s)/Customer(s)/Prime contractor(s).