Senior Defense Assessment Analyst (Penetration Tester)

Computer World Services Corp. (Cws) - Sierra Vista, AZ

Full-time - Senior

Sierra Vista, AZ

Professional, Scientific, and Technical Services

About the position

Computer World Services, Corporation (CWS) is seeking an exceptional candidate to serve as Defense Assessment Analyst- Senior for the US Army Regional Cyber Center - Continental United States (RCC-CONUS) program. This role is critical in performing non-personal Information Technology (IT) Services and support requirements. The RCC-CONUS is responsible for operating, managing, and defending the Army's NIPRNet and Secure Internet Protocol Router Network (SIPRNet) within the continental United States (CONUS) portion of the Global Information Grid (GIG). The RCC-CONUS functions as part of a larger joint environment, responding to the Theater Combatant Commanders, the ARCYBER, and the Army Cyber Command's Army Cyberspace Operations and Integration Center (ACOIC), which operates the GIG in support of Department of Defense (DoD) operations around the world. The services provided by the RCC-CONUS include Network and System Modernization, Cyber Defensive Operations, Defensive Cyber Assessments, Defensive Cyber Infrastructure Support, Threat & Data Analytics, DoDIN Operation Support, Network Management, Systems Management, IT Lifecycle Management, IT Service Management (ITSM), Portfolio/IT Investment Management, and Theater Operations and Service Desk support. The candidate will lead and participate in the analysis of actual and predictable interacting operational activities of business to obtain a quantitative, rational basis for decision making through the application of logic and scientific or economic disciplines and techniques. In this role, the candidate will leverage a lab environment provided by the RCC-C for malware analysis, development and testing of sensor signatures/rulesets, and the execution of penetration testing tactics, techniques, and procedures (TTPs) to determine the risk of exploits and vulnerabilities. The position requires conducting both local and remote penetration testing designed to emulate current threat models to the Army network, executing assessments of the defensive security posture, and conducting approximately thirty-six (36) week-long Cyber Defensive Assessment Program (CDAP) missions annually. The candidate will also be responsible for augmenting the Government in assessing a post/camp/station (P/C/S) and/or an organization's security enclave, utilizing approved tools to execute penetration testing, and developing and presenting final out briefs to discuss findings and recommendations.

Responsibilities

• Leverage a lab environment for malware analysis, development, and testing of sensor signatures/rulesets.
• Conduct local and remote penetration testing to emulate current threat models.
• Conduct approximately thirty-six (36) week-long CDAP missions annually.
• Augment the Government in assessing a post/camp/station (P/C/S) and/or an organization's security enclave.
• Conduct one NAV per month, requiring travel to remote sites for on-site penetration testing.
• Utilize approved tools to execute penetration testing of remote sites.
• Execute phishing campaigns to gain a foothold into the network.
• Develop and present final out briefs discussing findings and recommendations.
• Secure all equipment and coordinate with shipping personnel for equipment returns.
• Execute high-risk web assessments and non-notice penetration testing of assets.
• Research and develop payloads for penetration testing and phishing campaigns.
• Disseminate information to the CDO and Threat and Data Analytics branches.

Requirements

• BA/BS or an MA/MS preferred from an accredited university.
• Minimum of 12+ years of related IT experience.
• Certified Penetration Tester (GPEN) certification required.
• Certified Ethical Hacker (CEH) certification required.
• IAT II Certification (Security+, etc.) required.
• Top Secret/SCI clearance required.
• US Citizen or permanent resident.

Nice-to-haves

• Experience with military networks and operations.
• Familiarity with DoD cybersecurity policies and procedures.
• Knowledge of advanced persistent threats (APTs) and threat modeling.

Benefits

• Competitive salary
• Health insurance
• Retirement plan
• Paid time off
• Professional development opportunities