Defensive Cyber Operations (DCO) Analyst

📋 Description

• On-site role at Hill AFB, Ogden, Utah. Monitor and respond to cyber threats across on-prem ELK and
• Utilize AI-assisted analysis to triage security events, detect anomalies, and speed incident
• Perform vulnerability management, incident analysis, and develop DCO TTPs and documentation.
• Contribute to Root Cause Analysis, briefings, reports, and customer exercises as needed.

🎯 Requirements

• 4+ years in cybersecurity with direct SOC/vSOC/CSSP incident response.
• 2+ years with Splunk Enterprise and ELK Stack for threat detection and correlation.
• Experience in AWS GovCloud (CloudTrail, VPC Flow Logs, GuardDuty), and on-prem ELK/Splunk.
• Hands-on GitLab experience (source control, CI/CD, DevSecOps).
• 2+ years applying DoD cybersecurity requirements, policies, and DoDD 8140/8570 IAT CSSP certs (CEH
• Bachelor’s degree in CS/IT or related field; US Citizenship with active Top Secret/SCI clearance.

🎁 Benefits

• EEO/AA employer; eligible for federal employment protections.
• Full-time W2 employee; no third-party staffing, C2C, or 1099 contractors.