Analysis Skills, Authentication, Business Strategy, CISSP - Certified Information Systems Security Professional, Campaigns, Communication Skills, CompTIA Security+, Computer Security, Continuous Deployment/Delivery, Continuous Integration, Cryptography, Customer Relations, Defense Information Systems Agency (DISA), DoD Directive 8140, DoD Directive 8570, Documentation, Firewalls, GCFA - GIAC Certified Forensic Analyst, Government, Hardware Architecture, Information Technology & Information Systems, Intelligence Analysis, Internet Security, Leadership, Leading Edge Technology, Linux Administration, Malware, Microsoft Windows Server, Microsoft Windows System Administration, Network Administration/Management, OSINT (Open Source Intelligence), Online Communications, Operational Audit, Operational Strategy, Quality Management, Red Hat Linux Operating System, Reporting Skills, Request for Information (RFI), Requirements Management, Risk, Risk Management, Scientific Research, Security Analysis, Security Attacks, Security Design, Strategic Planning, System Architecture, Systems Administration/Management, Tactical Operations, Team Player, Threat and risk analysis (TRA), United States Department of Defense (DoD), Vendor/Supplier Sourcing, Willing to Travel
Colorado Springs, Colorado
Scientific Research Corporation (SRC) is an advanced information technology engineering company that provides innovative products and services to government and private industry, as well as independent institutions. At the core of our capabilities is a seasoned team of highly skilled engineers and scientists with multidisciplinary backgrounds. This team is challenged daily to provide cutting edge technology solutions to our clients. SRC is searching for a highly skilled and experienced Cybersecurity Analyst to manage and respond to cyber threats, focusing on processing Cyber Tasking Orders (CTOs), analyzing Security Operations Center (SOC) alerts, and conducting comprehensive threat intelligence activities. The ideal candidate will have at least 3 years of combined cybersecurity experience, including 2+ years in a SOC or Cyber Security Analyst role within SIPRNET or NIPRNET environments, and 2+ years in Windows and/or Linux system administration, along with an active DoD 8140 Workforce Certification. Key responsibilities include evaluating vulnerabilities, developing mitigation strategies, tracking zero-day threats, and preparing detailed threat intelligence reports and briefings for various stakeholders. Duties & Responsibilities include:
- Processing, coordinating, tracking, analyzing, documenting, and reporting Cyber Tasking Orders (CTOs) and high interest items
- Assessing, analyzing, and remediating Security Onion Console (SOC) alerts or other SIEMs
- Evaluating security vulnerabilities, developing mitigation strategies, implementing remediation activities, and creating Plans of Action and Milestones (POA&Ms)
- Administering systems in Windows 11, Windows Server 2019, 2022, or 2025, or Red Hat Enterprise Linux (RHEL) 8x or 9x
- Monitoring, collecting, and analyzing cyber threat intelligence from internal and external sources, including vendors and open-source intelligence
- Researching cyber threat actors, threat groups, campaigns, malware, vulnerabilities, fraud trends, and geopolitical events that may impact the organization or its clients
- Identifying emerging threats, assessing potential mission impact, and providing actionable recommendations to reduce risk
- Tracking zero-day vulnerabilities and high-risk CVEs, including preparing reports with potential impact, mitigation steps, and remediation guidance
- Developing and publishing tactical, operational, and strategic threat intelligence reports for cybersecurity teams, stakeholders, and executive leadership
- Consolidating and evaluating cyber threat intelligence feeds to improve the quality, relevance, and timeliness of threat assessments
- Analyzing internal security risks and threat exposure to identify potential weaknesses
- Responding to customer or stakeholder requests for information related to cyber threats, vulnerabilities, and risk trends
- Preparing briefings and executive summaries that communicate cyber risks in clear, non-technical language
- Developing and maintaining documentation, procedures, and playbooks related to threat intelligence and response processes
- Ensuring that security design and distribution actions are evaluated, validated, and implemented as required
- Ensuring that cybersecurity requirements are integrated into the architecture for the system or organization
- Evaluating development efforts to ensure that baseline security safeguards are planned for and appropriately installed
- Identifying alternative security strategies to address organizational security objectives of cyber taskings
- Assessing DoW security requirements and DISA Security Technical Implementation Guides (STIGs)
- Coordinating with other system SMEs to identify and develop authorization boundary diagrams, architecture diagrams, and hardware and software inventories
#LI-LH1
- Three or more years of combined cybersecurity experience holding one or more of the following roles: ISSO, Cyber Security Analyst, and/or Systems/Network Administrator
- Two or more years of experience working Security Operations Center (SOC)/Cyber Security Analyst either in SIPRNET or NIPRNET environments
- Two or more years of experience working with Windows and/or Linux systems administration
- Active DoD 8140 Workforce Certification (e.g. Security+ CE, CISSP, CySA+, GCFA, etc.)
Desired Skills:
- Experience working in DevSecOps (CI/CD) environments
- Knowledge of cybersecurity principles and DoD requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)
- Knowledge of IT security principles and methods (e.g., firewalls, demilitarized zones, encryption, Zero Trust)
- Ability to communicate and establish collaborative relationships with government clients and associate contractor teammates to achieve program goals
Clearance Information:
SRC IS A CONTRACTOR FOR THE U.S. GOVERNMENT, THIS POSITION WILL REQUIRE U.S. CITIZENSHIP AS WELL AS, A U.S. GOVERNMENT SECURITY CLEARANCE AT THE SECRET LEVEL WITH TOP SECRET / SCI ELIGIBILITY
Travel Requirements:
About Us:
Scientific Research Corporation is an advanced information technology and engineering company that provides innovative products and services to government and private industry, as well as independent institutions. At the core of our capabilities is a seasoned team of highly skilled engineers and scientists with multidisciplinary backgrounds. This team is challenged daily to provide cutting edge technology solutions to our clients.
SRC offers a generous benefit package, including medical, dental, and vision plans, 401(k) with a company match, life insurance, vacation and sick paid time off accruals with amounts increasing based on role and years of service, 11 paid holidays, tuition reimbursement, and a work environment that encourages excellence and more. For positions requiring a security clearance, selected applicants will be subject to a government security investigation and must meet eligibility requirements for access to classified information.
EEO:
Scientific Research Corporation is an equal opportunity employer that does not discriminate in employment.
All qualified applicants will receive consideration for employment without regard to their race, color, religion, sex, age, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other protected characteristic under federal, state or local law.
Scientific Research Corporation endeavors to make www.scires.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact jobs@scires.com for assistance. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications.
S
Scientific Research Corporation
Scientific Research Corporation is an advanced engineering company that was founded in 1988 to provide innovative solutions to the U.S. Government, private industry, and international markets. Since its inception, SRC has continued to successfully meet em