Cyber Threat Emulation Analyst

Requirements:
Must have active TS/SCI clearance. We are not able to upgrade a clearance at this time.
Must have SEC+ before starting.
Must have or be able to obtain one of the following: GDAT, OSCP, GPEN, PenTest+

Job Description
Duties:
Conduct both automated and manual enterprise vulnerability assessments, including conducting regular patch & configuration vulnerability assessments as directed by operational flight leads.
Conduct Cyber Threat Emulation operations, and coordinate with security teams to strengthen the overall security posture of the AFNet and AFIN various tools and capabilities.
Test for real‐time security vulnerabilities, conduct assessments, and assess vulnerability risk and impact.
Continuously develop and maintain safe and valid procedures to actively test Enterprise defensive measures. (CDRL A007 & A008)
Develop mitigations, policies, and procedures to coordinate with internal teams. (CDRL A007)
Work with incident response team to develop response policies and procedures.
Generate threat intelligence indicators during the course of Cyber Threat Emulation operations and provide reports back to operators. (CDRL A008)
Coordinate with internal and external intelligence teams in order to replicate threat actor (TA) Techniques, Tactics, and Procedures (TTPs).
Research & Evaluate threats and vulnerabilities to assist in the prioritization of remediation actions.
Utilize knowledge and understanding of the Cyber Threat Framework (ODNI) and production of Threat Emulation findings.
Utilize the MITRE ATT&CK framework to perform cyber security operations testing, and develop improvements based upon adversary behavior.
Formulate, lead and persuade individuals, large teams and communities on ideas, concepts, and opportunities.
Leverage research, frameworks, and best practices on the latest exploits and security trends and currency on industry trends and provide operational reports/assessments for development of tactics, techniques, and procedures. (CDRL A002)
Provide OJT to other contractor employees, military, and/or civilian personnel, and ensure continuity folders/working aids are updated at least once per quarter in order to ensure efficient transition when personnel rotate.
Create, document, and report metrics for analysis to improve weapon system processes and mission execution. (CDRL A009).
Provide information to operational leaderships tasking as required as it relates to CTE actions
________________________________________________________________________________________
This position requires an active DoD Clearance (Secret, Top Secret, Top Secret/SCI) or the ability to be obtain an (Interim Secret, Interim Top Secret). Because an active or interim DoD clearance is required, U.S. Citizenship is required.

Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms.  If eligible, the benefits available for this temporary role may include the following:
-Medical, dental & vision
-Critical Illness, Accident, and Hospital
-401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available
-Life Insurance (Voluntary Life & AD&D for the employee and dependents)
-Short and long-term disability
-Health Spending Account (HSA)
-Transportation benefits
-Employee Assistance Program
-Time Off/Leave (PTO, Vacation or Sick Leave)