Monitor and analyze network traffic, system logs, and security alerts to detect, investigate, and escalate cybersecurity threats and incidents.
Support integrated cyber defense operations aligned with organizational risk management frameworks.
Maintain security tools to enable continuous monitoring and RMF/NIST authorization activities.
Establish and apply methods to quantify and measure cyber risk, supporting risk-based decision-making across the enterprise.
Evaluate business and system architectures to determine cybersecurity requirements and ensure alignment with information security standards and best practices.
Conduct system security, vulnerability, and risk assessments to identify security gaps, integration challenges, and compliance issues.
Develop cost estimates and implementation plans for cybersecurity solutions based on risk and compliance assessments.
Prepare, implement, and enforce cybersecurity policies, standards, and Assessment & Authorization (A&A) requirements.
Plan, implement, upgrade, and monitor security controls to enhance system resilience and support accreditation processes.
Identify cybersecurity vulnerabilities, recommend remediation strategies, and track mitigation efforts to closure.
Respond to and investigate cybersecurity incidents, restore protections, and produce required incident reports in accordance with regulatory guidance.
Develop and execute security test scripts and validation activities to verify the effectiveness of technical and operational controls.
Design, develop, and integrate DoD Information Assurance architectures and secure system components within computing, network, and enclave environments.
Ensure system architectures, including programs of record and special-purpose processing nodes, meet functional, performance, and security requirements.
Support secure integration of platform IT and special-purpose systems with existing infrastructure.
Develop and deliver cybersecurity training, lead post-incident reviews, and promote a strong security awareness culture.