SMS is seeking a Counter Access Analyst for or AFCENT NOCS contact at Shaw Air Force Base. AFCENT’s mission is to deliver combat-ready air, space, communications, and cyberspace capability for USCENTCOM, helping maintain security and stability throughout Southwest Asia. We support the AFCENT Commander, USCENTCOM, coalition and joint partners, and warfighters who rely on NIPRNet, SIPRNet, partner networks, and other command-and-control systems. The AFCENT NOSC program is focused on running and protecting a 24/7 enterprise network and systems operations, including cybersecurity, engineering, maintenance, and technical support, keeping the AFCENT’s theater communications and IT infrastructure ready, secure, and available to effectively execute the AFCENT mission.

Since 1976, SMS has specialized in modernizing legacy IT and sustaining complex enterprise environments for federal agencies. With the goal of building long-term partnerships with our customers, we invest in our employees by providing the training, tools, and support they need to keep critical missions operational, improve performance, and reduce risk. SMS is headquartered in McLean, Virginia, with offices and on-site operations at customer locations throughout the United States. For additional information on SMS, visit www.sms.com.

Submit your resume today!

Job Responsibilities

• Build tactical and strategic network profiles for specific systems and complete network architecture.

• Utilize network intrusion devices and available cyber defense infrastructure, including Endpoint Security Systems, Intrusion Detection and Prevention Systems (IDS/IPS), proxy security appliances, forensics tools, and other security agents to minimize threats to networks.

• Maintain the Incident Response Procedure document and all associated processes and procedures.

• Assist with analyst training in advanced traffic analysis, incident response, and cyber hunt activities.

• Conduct cyber hunt activities, search through systems and networks to detect advanced threats and monitor network traffic to determine system vulnerabilities and required fixes. Apply established network security procedures, log and make recommendations for correcting network security incidents. Coordinate the escalation of security issues requiring detailed analysis to Cybersecurity Analysts.

• Analyze network intrusion detection systems (IDS) and intrusion prevention systems (IPS) for evidence of malicious cyber activity and conduct defensive cyber operation (DCO) missions to eliminate identified threats.

• Conduct threat emulation testing and develop and deploy advanced threat mitigation strategies in response to test results.

• Develop and deploy countermeasures to isolate, contain and prevent intrusive activities.

• Conduct network and computer forensics on suspected and confirmed compromised systems to determine the method of intrusion and corrective actions to be taken to prevent or detect similar future activities.

• Conduct thorough forensic investigations on security incidents, including data breaches and system compromises.

• Collect, preserve, and analyze digital evidence following established procedures to support incident investigations.

• Develop detailed reports on forensic findings, providing actionable insights and recommendations for remediation.

• Provide overall site-analysis profile to serve as a benchmark to identify unusual or suspicious activity.

• Analyze live and historical data for events related to possible network infiltration.

• Maintain current knowledge of new vulnerabilities and exploits. Develop countermeasures to isolate, contain and prevent intrusive actives and secure networks.

• Develop methods to identify, contain, log, and analyze intrusive activities and security vulnerabilities on networks.

• Perform network traffic and host analysis to evaluate intruder activities using host and network-based monitoring system. Correlate information gathered to provide effective methods to protect the domain. Ensure appropriate notification action is taken to reduce the risk to the networks.

• Conduct network and computer forensics on suspected and confirmed compromised system to determine the method of intrusion and corrective actions to be taken to prevent or detect similar future activities.

• Maintain current knowledge on existing and new malware behavior and propagation characteristics. Maintain current knowledge on the anti-virus tools currently in use.

• Develop methods to identify, contain, log, and analyze malware-based activities on networks.

• Support ongoing cyber forensics investigations by preserving evidence integrity and chain of custody.

• Use vulnerability toolset to determine networks and systems security weaknesses and shortfalls.

• Research and coordinate vulnerability finding with Security Analysis to provide detailed fix actions.

• Coordinate with other Counter Access Team (CAT) and Vulnerability Management (VM) team to ensure latest known vulnerabilities are properly identified and corrected.

• Monitor network traffic to determine system vulnerabilities and required fixes. Apply established network security procedures, logs and make recommendation for correcting network security incidents; and coordinate the escalation of security issues requiring detailed analysis to Security Analyst.

• Examine logs and information gained from network sniffers or protocol analyzers to determine if possible unauthorized access has occurred.

• Identify, track and record suspected intrusion or actual security breach; and detail analyses in written reports for legal use.

• Provide oral or written findings and explanation of events for any legal actions associated with security breaches.

• Provide General Networking support.

• Provide LAN support.

• Provide WAN Enterprise support.

• Provide technical and general O&M support as required.

• Provide documentation/reports support as required.

• Provide meetings/briefings support as required.

• Provide functional training support as required.

• Provide OCONUS deployment/TDY travel support as required.

• Provide CONUS TDY support as required.

Required Qualifications

• B.S. in related field and 5 or more years’ relevant experience; or, 7 or more years’ relevant experience.

• Firewall experience

• Knowledge of how to develop Disaster Recovery and Continuity of Operations plans for systems under development and ensure testing prior to systems entering a production environment.

• Must possess experience and demonstrate an understanding with installation of Microsoft Windows Server in Host and Compute Environments, and Windows Server using server images.

• Experience with implementation of storage solutions, high availability, Domain Name Systems (DNS), Dynamic Host Configuration Protocol (DHCP), network connectivity and remote access solutions, core and distributed network solutions, advance network infrastructure, and maintain and monitor server environments.

Certifications Required

• CompTia Network+ or CISCO Certified Network Associate (CCNA)

• ITIL Foundation - Candidate has up to 60 days to acquire ITIL Foundation certification

Clearance Required

• Department of Defense Secret security clearance or the ability to obtain an Interim Secret clearance.

SMS is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.