Cybersecurity Sensor Technician/Data Security Analyst II

Feditc - San Antonio, TX

Full-time - Mid Level

San Antonio, TX

Professional, Scientific, and Technical Services

About the position

FEDITC, LLC is seeking a Cybersecurity Sensor Technician/Data Security Analyst II in the San Antonio, TX area. This role involves supporting the Department of Defense and other intelligence agencies by developing mission-critical national security systems. The primary focus is on collecting and analyzing network intrusion data to identify and mitigate incidents, enhancing network security, and ensuring the integrity of classified systems.

Responsibilities

• Collect and analyze network intrusion data from various sources, including logs, system images, and packet captures, to identify and mitigate network incidents.
• Perform incident triage to determine scope, urgency, and potential operational impact by identifying vulnerabilities and providing actionable recommendations.
• Create custom signatures or correlation rules to detect and mitigate future incidents.
• Provide expert recommendations to enhance network and system resistance against future attacks.
• Support classified IC ISR sensors cybersecurity activities, ensuring secure operation and data integrity.
• Perform incident handling, including forensics collection, intrusion tracking, threat analysis, and system remediation tasks.
• Utilize SIEM and Endpoint tools such as LogRhythm, Tanium, Splunk, and HBSS for threat detection and response.
• Develop and publish sensor security guidance for appropriate audiences.
• Develop Standard Operating Procedures (SOPs) and workflows, integrating applicable new technologies for improved security posture.

Requirements

• Bachelor's or Master's degree in Information Technology or a related field.
• 3+ years of experience in network security, incident response, or a related cybersecurity role.
• Strong analytical skills and the ability to work in a fast-paced, dynamic environment.
• IAT II Level certification required, along with CSSP-Infrastructure Support certification or equivalent.
• Experience with SIEM tools (e.g., Splunk, LogRhythm) and Endpoint solutions (e.g., Tanium, HBSS).
• Active TS/SCI clearance is required.