Defensive Cyber Operations (DCO) Analyst
Darkwolfsolutions · Ogden, Utah
About this role
**Defensive Cyber Operations (DCO) Analyst** **About the Role** Dark Wolf Solutions is seeking a **Defensive Cyber Operations (DCO) Analyst** to perform continuous system monitoring to identify malicious cyber-attacks and support containment and remediation of IT threats. This is a **fully on-site** role at **Hill AFB in Ogden, Utah**. **Key Responsibilities** - Monitor, detect, and analyze security events across **on-prem (ELK)** and **AWS GovCloud (Splunk Enterprise)** environments - Use **AI-assisted analysis, automation, and correlation** to triage events, detect anomalies, and reduce response times - Support **vulnerability management** by providing recommendations and implementing mitigations - Conduct intrusion analysis and correlation of unauthorized activity; recommend improvements to detection and mitigation processes - Participate in **Root Cause Analysis** and document actions taken to mitigate unauthorized activity - Contribute to the development of **DCO TTPs** (tactics, techniques, and procedures) and supporting documentation - Identify security discrepancies and respond to security incidents - Provide research and analysis to expand programs and areas of responsibility - Draft documentation for briefings, reports, and informational analyses - Participate in customer exercises (**after duty hours may be required**) - Adhere to defined policies, master plans, and schedules - Complete initial and annual training requirements and disclosures as outlined by BSTG - Perform other duties as required **Required Qualifications** - **4+ years** relevant cybersecurity experience, including direct **SOC / vSOC / CSSP** incident response experience - **2+ years** hands-on experience with **Splunk Enterprise** and **ELK Stack** (Elasticsearch, Logstash, Kibana) - Direct experience monitoring/ingesting/analyzing security telemetry in **AWS GovCloud** (e.g., **CloudTrail, VPC Flow Logs, AWS GuardDuty**) - Hands-on experience with **GitLab** (source control, CI/CD pipelines, issue tracking, or DevSecOps workflows) - **2+ years** experience applying **DoD cybersecurity requirements, policies, and procedures**, including assessment and authorization activities - **DoD 8140 / 8570 IAT CSSP certification** required prior to hire (e.g., **CEH, Security+, GCIH, CySA+**, or equivalent) - Bachelor’s degree in Computer Science, IT, or related field - **US Citizenship** and an active **Top Secret/SCI** clearance required **Desired Qualifications** - Experience with **AI/ML security tools** (e.g., generative AI for query generation, automated threat intelligence, AI-driven behavioral analytics) - **AWS Certified Security – Specialty** - **Splunk Core Certified Power User/Admin** or **Elastic Certified Analyst** certifications - Experience writing search queries using **SPL** and **KQL/Lucene** - Experience with **SentinelOne** (or similar EDR) for endpoint detection, threat hunting, and automated remediation - Familiarity with **Infrastructure-as-Code (IaC)** tools such as **Terraform** or **Ansible** - Experience supporting cybersecurity activities across software/system requirements, design, development, testing, and sustainment - Experience with **HBSS, ACAS, SCC (SCAP Compliance Checker), DISA STIGs** - Working knowledge of **NIST 800-53** Security and Privacy Controls - Experience with **RHEL** and **Windows** - Experience performing post-incident forensics without destroying critical data - Ability to guide DoD cyber regulations/requiremen
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.