Defensive Cyberspace Operation (DCO) Analyst

Position Overview

The Defensive Cyberspace Operation (DCO) Analyst supports the United States Space Force (USSF) via the Space Operations Command (SpOC) and the SPICES contract. Based in Colorado Springs, this mid-level role provides Defensive Cyber Operations planning, execution, and follow-on support. The position requires working the night shift from 7pm to 7am under a 12-hour shift structure. Clearance Requirement: TS/SCI. Education requirement is a High School Diploma/GED.

Key Responsibilities

• Conduct intrusion analysis and correlate unauthorized activities, providing recommendations for improving mitigation processes.
• Perform threat insight processes to support mitigation and remediation efforts.
• Handle incidents in accordance with CJCSM 6510.01B and relay incident details using the AFSPC 9-Line Report format.
• Support SpOC ACCC Operational Planning Team activities and analyze cyber incidents to formulate effective response actions.
• Recommend tuning and enhancements for current tools, as well as propose new tools to increase capability.
• Monitor government-provided DCO tools and systems and conduct after-action reviews to document mitigation efforts.
• Participate in the development of DCO Tactics, Techniques, and Procedures (TTPs) and contribute to DCO concept of operations.
• Identify, report, and analyze security discrepancies and incidents while providing expert research and leadership.
• Prepare briefings, reports, and analyses in support of USSF and SpOC, ensuring adherence to government policies and schedules.
• Participate in customer exercises, including after-hours duties as required, and respond to INFOCON and CPCON changes.

Required Qualifications

• Proven ability to communicate effectively both orally and in writing, and to negotiate complex issues.
• Strong analytical and product management skills with the capacity to interpret customer needs and translate them into operational requirements.
• Proficiency in Microsoft Office (Outlook, Word, Excel, PowerPoint), message distribution systems, and Analyst Notebook.
• Ability to quickly learn and adapt to new tools and changing architectures.
• Three or more years of Cyber Security Services Provider experience, including continuous cybersecurity monitoring, intrusion detection, or incident response.

Certifications

• Minimum of one active DoD 8570.07-M Cyber Security Services Provider (CSSP) Analyst Certification OR Incident Responder Certification (e.g., CEH, CySA+, GCIH, GCIA, CFR, CCNA Cyber Ops, CCNA-Security, GICSP, Cloud+, SCYBER, PenTest+, CHFI, or GCFA).

About the Company

SMS has been serving the federal government’s advanced information technology needs since 1976. The company delivers innovative, cost-effective solutions in engineering, operations, cybersecurity, and digital transformation. Headquartered in McLean, Virginia, SMS operates offices and on-site operations throughout the United States. For additional information, visit www.sms.com.