N

Cyber Countermeasure Specialist (JFN IL-7) - DISA Pacific

Newberry Group • United State
Relocation
Apply Now

This role is responsible for engineering, deploying, and maintaining defensive cyber countermeasures, detection signatures, and containment workflows within the Joint Fires Network (JFN) Impact Level 7 environment at DISA Pacific. The specialist will tune advanced sensor grids (Corelight, Elastic Defend), develop threat containment playbooks in JIRA, and enforce DIA spill/breach containment standards. Key requirements include a Top Secret/SCI clearance, DoD 8140 certification, and hands-on experience with intrusion detection systems, signature creation, and network defense operations.

Key Highlights
Bridges detection analytics and active threat containment for JFN IL-7 and multi-domain enclaves.
Operates across up to 30 active nodes including SD-WAN and out-of-band management links.
Requires active Top Secret clearance with SCI eligibility and DoD 8140 baseline certification.
Collaborates with Tier II NOC engineers and NIWC pipeline architects.
Full-time onsite at Ford Island, HI; no telework; relocation expenses may be reimbursed.
Key Responsibilities
Configure, tune, and operationalize advanced boundary and enroute security sensors—including Corelight and Elastic Defend—to maximize high-fidelity detection while suppressing noise across JFN nodes.
Design, test, validate, and maintain custom intrusion detection rules, Zeek scripts, YARA rules, and Elastic SIEM detection logic targeting emerging exploit patterns.
Collaborate with NIWC data engineers to validate log ingestion pipelines from Palo Alto ATP, Prometheus, and endpoint monitors.
Track all deployed signatures and mitigation actions within JIRA; execute de-confliction procedures with DISA and operational network authorities.
Establish, document, and test rapid rollback mechanisms for sensor configurations and containment rules.
Develop, automate, document, and maintain end-to-end SOPs and execution runbooks for threat containment using Atlassian JIRA.
Support the drafting, maintenance, and technical execution of the JFN Incident Response Plan.
Drive technical countermeasure delivery for DoD CSSP core functions during Phase I standup and Phase II sustainment.
Translate behavioral anomaly findings into actionable rule-based containment triggers across SD-WAN and out-of-band management channels.
Implement and enforce DIA protocols for containment of classified data spills, unauthorized cross-domain transfers, or credential compromise.
Verify that all active countermeasures adhere to TS/SCI audit criteria and JFN Security Classification Guidance.
Partner daily with JFN 24/7 Real-Time Analysts, Tier II NOC administrators, and DISA Field Command leadership for high-priority containment actions.
Conduct all defensive engineering within designated SCIFs, maintaining operational integrity.
Technical Skills Required
Intrusion Detection/Prevention Engineering Signature Creation (Snort/Suricata, Zeek, YARA, Elastic KQL/EQL) Corelight and Elastic Defend / ELK Stack
Benefits & Perks
Medical, dental, and vision coverage
Personal time off and paid holidays
Paid parental leave
Retirement savings accounts (Pre-Tax and Roth)
Flexible and dependent care savings accounts
Life insurance
Long and short-term disability coverage
Tuition and training reimbursement
Employee assistance program
Relocation expenses may be eligible for reimbursement
Nice to Have
Direct experience deploying and managing countermeasures across IL-6/7, SIPRNet, or Top Secret/SCI enclaves.
Familiarity with SD-WAN technologies, Out-of-Band network management, and SolarWinds monitoring integrations.
Experience with automated containment scripting using Python, PowerShell, Bash, or REST APIs.
Understanding of Darktrace MDR and Prometheus pipeline data flows.
Prior experience supporting C4ISR systems or joint tactical enclaves.

Job Description

Newberry Group is seeking an experienced, technically agile to support our customer’s defensive cyber operations team supporting the Joint Fires Network (JFN). Stationed inside secure SCIF environments at DISA Pacific (Ford Island, HI), this position plays a critical role in bridging detection analytics and active threat containment for the JFN Impact Level 7 (IL-7) environment and associated multi-domain operational enclaves.
Want the full job description? Read the complete details on LinkedIn, the original posting.
Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.

See Jaabz jobs first on Google 1 tap · free · in AI Overviews Jaabz is on your Google Manage Preferred Sources

Similar Jobs

Explore other opportunities that match your interests

Visa Sponsorship Relocation Remote
Job Type Full-time
Experience Level Not Applicable

KBR Careers

United State

Principal Network Communications Engineer

Networking
•
1d ago

Premium Job

Sign up is free! Login or Sign up to view full details.

•••••• •••••• ••••••
Job Type ••••••
Experience Level ••••••

Northrop Grumman

United State

Senior Principal Network Communications Engineer

Networking
•
1d ago

Premium Job

Sign up is free! Login or Sign up to view full details.

•••••• •••••• ••••••
Job Type ••••••
Experience Level ••••••

Northrop Grumman

United State

Subscribe our newsletter

New Things Will Always Update Regularly