Cyber Operations Center CyOC Lead

$80,001 - $80,001/Yr

SAIC - Scott Air Force Base, IL

Full-time

Scott Air Force Base, IL

Professional, Scientific, and Technical Services

About the position

The National Security Customer Group of SAIC is seeking a Cyber Operations Center (CyOC) Lead to support an IT Service Management effort for USTRANSCOM located at Scott Air Force Base (AFB) in Illinois. The USTC Managed Information Technology Services (MITS) contract is designed to provide strategic, technical, and program management guidance and support services to facilitate the operations and modernization of the combatant command's infrastructure, systems, and applications. This support will be provided to the USTC Command, Control, Communications & Cyber Systems Directorate (TCJ6). The successful candidate will work on high-visibility or mission-critical aspects of the program and perform all functional duties independently. They will oversee the efforts of less senior staff and/or be responsible for the efforts of all staff assigned to a specific job. In this role, the CyOC Lead will be responsible for leading the Cyber Operations Center, coordinating with the Government Duty Officer (DO) and cyber security analysts to identify and correlate problems affecting USTRANSCOM customers. The lead will also coordinate staff responsible for Event Management to manage all events and their associated lifecycle, including detection, analysis, and control, as defined by the Event Management Process. The lead will manage Event Management activities, which include Detection, Logging, Filtering, and Significance assessment, and will ensure that events are managed following ITIL guidance to assess and document responses to each event, such as automatic responses, Incidents, Problems, Changes, Alerts, and Human Interventions. Additionally, the CyOC Lead will monitor processes to achieve established Service Level Agreements (SLA) and Operational Level Agreements (OLA). They will provide extremely high-level subject matter proficiency for the work described in the task and will offer advanced technical knowledge and analysis of highly specialized applications and operational environments. This includes high-level functional systems analysis, design, integration, documentation, training, and implementation advice on complex problems that require doctorate-level knowledge of the subject matter for effective implementation. The lead will also be responsible for providing status reporting to management and the customer. This position is for Monday through Friday during normal business hours, but the employee may be required to provide after-hours and weekend support during planned or emergency events.

Responsibilities

• Responsible for leading the CyOC.
• Coordinate Duty Controller staff responsible to coordinate with the Government Duty Officer (DO) and cyber security analysts to identify and correlate problems affecting USTRANSCOM customers.
• Coordinate staff responsible for Event Management to manage all events and associated lifecycle (detect, analyze, and control) as defined by the Event Management Process.
• Coordinate staff responsible for Event Management activities to include Detection, Logging, Filtering, and Significance assessment.
• Lead staff to manage Events following ITIL guidance to assess and document responses to each event such as automatic responses, Incidents, Problems, Changes or Alerts and Human Interventions.
• Monitor processes to achieve established Service Level Agreements (SLA) and Operational Level Agreements (OLA).
• Provide extremely high-level subject matter proficiency for work described in the task.
• Provide advanced technical knowledge and analysis of highly specialized applications and operational environment, high-level functional systems analysis, design, integration, documentation, training, and implementation advice on complex problems that require doctorate level knowledge of the subject matter for effective implementation.
• Provide status reporting to management and customer.

Requirements

• Bachelors and five (5) years or more experience.
• DoD Secret clearance.
• One of these IAT Level II certifications: Security+, CECCNA-Security, CySA+, GICSP, GSEC, CND, SSCP.
• A Computing Environment (CE) certification or certificate for the technical area of responsibility in either Network support/defense (e.g., Splunk, Cisco, McAfee, etc.) OR (e.g., Microsoft, Linux, Solaris, etc.).
• Must be able to work independently and as part of a team.
• Must be available to participate in on-call work on a reoccurring basis.
• Solid troubleshooting skills and demonstrated ability of end-to-end problem management and ownership.
• Excellent written and oral communication skills.
• Must be US Citizen.