Cyber Threat Emulation & Analyst

Position Overview

STS Systems Support, LLC. (SSS) is seeking a Cyber Threat Emulation & Analyst at Lackland AFB in San Antonio, TX.

Required Qualifications

• DoDD 8570.01M/8140.01 I AT Level III CND
• Active TS/SCI
• Five years' penetration testing experience (BA/BS or MA/MS)
• Demonstrated advanced knowledge of cyber security operations with mastery in two or more of the following: attack surface management, Security Operations Center (SOC) operations, Intrusion Detection/Intrusion Prevention Systems (IDS/IPS), Security Information and Event Management (SIEM) use, threats (including Advanced Persistent Threat (APT) and insider threats), vulnerabilities, exploits; and incident response, investigations, and remediation
• Experience with PowerShell, BASH, or Python scripting/programming languages
• Strong understanding of the Linux Operating System
• Extensive knowledge of the MITRE ATT&CK framework and its applications within the cybersecurity community

Key Responsibilities

• Conduct both automated and manual enterprise vulnerability assessments, including regular patch and configuration vulnerability assessments as directed by operational flight leads.
• Conduct Cyber Threat Emulation operations and coordinate with security teams to strengthen the overall security posture of the AFNet and AFIN tools and capabilities.
• Test for realtime security vulnerabilities, conduct assessments, and evaluate vulnerability risk and impact.
• Continuously develop and maintain safe and valid procedures to actively test Enterprise defensive measures (CDRL A007 & A008).
• Develop mitigations, policies, and procedures in coordination with internal teams (CDRL A007).
• Collaborate with the incident response team to develop response policies and procedures.
• Generate threat intelligence indicators during Cyber Threat Emulation operations and report findings to operators (CDRL A008).
• Coordinate with internal and external intelligence teams to replicate threat actor (TA) Techniques, Tactics, and Procedures (TTPs).
• Research and evaluate threats and vulnerabilities to prioritize remediation actions.
• Utilize knowledge of the Cyber Threat Framework (ODNI) in producing Threat Emulation findings.
• Apply the MITRE ATT&CK framework to perform cybersecurity operations testing and develop improvements based on adversary behavior.
• Formulate, lead, and persuade individuals, large teams, and communities on innovative ideas and concepts.
• Leverage research, frameworks, and best practices on the latest exploits and security trends to provide operational reports and assessments for developing tactics, techniques, and procedures (CDRL A002).
• Provide on-the-job training (OJT) to contractor employees, military, and/or civilian personnel, ensuring continuity folders and working aids are updated at least quarterly.
• Create, document, and report metrics for analysis to improve weapon system processes and mission execution (CDRL A009).
• Offer information to operational leadership regarding tasks related to Cyber Threat Emulation actions.

Benefits & Perks

• Paid Holidays
• Paid Time Off including sick and vacation leave
• Medical, Dental, and Vision Insurance
• Flexible Spending Accounts
• Short and Long Term Disability
• Company Paid Life Insurance
• 401(k) with a Company Match
• Discretionary Profit Sharing
• Tuition Reimbursement

STS Systems Support, LLC (SSS) offers a competitive benefits package and is an Equal Opportunity Employer. Employment decisions are made without regard to any protected category. Hiring preference will be given to BBNC shareholders, their spouses and descendants, and Alaska Natives in accordance with Public Law 93-638.