By Light is hiring a Cyber Watch Officer to join our team supporting a Government customer. This position will perform Computer Network Defense (CND) incident handling, vulnerability management/reporting, risk analysis and readiness, and strategic analysis to enable the customer to identify active exploits and threats to the network. This position is a shift work position and could require you to work day shift, afternoons, or overnight, as well as weekends and holidays.
Knowledge of the DoD orders process.
Knowledge of Cyber Incident Handling/Triage.
Knowledge of Cyber vulnerability management cycle.
Knowledge of Windows and/or Unix operating systems.
Knowledge of LAN/WAN design and general internetworking technologies.
Knowledge of security principles, approaches, and technologies (Defense-in-Depth).
Knowledge of IT security architecture and design (firewalls, IDS/IPS, VPN, Endpoint protection).
Knowledge of the DoD Information Assurance Vulnerability Management (IAVM) process.
Knowledge of DOD Cyberspace Operations (JP 3-12).
Knowledge of DOD's Cyber Incident Handling Program (CJCSM 6510.01B).
Knowledge of DODIN Transport (DODI 8010.01).
Knowledge of Cybersecurity Activities Support to DODIN Operations (DODI 8530.01).
Knowledge of the Cyber Mission Force (CMF) Construct.
Familiarity with Joint Reporting Structure guidance (CJCSM 3150.05D, CJCSM 3150.07E).
Familiarity with conducting risk assessments (NIST SP 800-30 Rev 1, Guide for Conducting Risk Assessments; DODIN Risk Assessment Methodology).
Working knowledge of DOD Security Technical Implementation Guide (STIG) Viewer.
Working knowledge of Packet Capture (PCAP) and analysis (Noesis, Wireshark).
Working knowledge of DOD Boundary and SIEM Tools (DISA Enterprise Collaborative Operational Sensor suite JRSS, etc.).