Information Technology Specialist (Security / Network Services)

About the Position: This position is a DOD Cyber Excepted Service (CES) personnel system position in the Excepted Service under 10 USC 1599f. Employees occupying CES positions are in the Excepted Service and must adhere to U.S. Code, Title 10, as well as Department of Defense Instruction 1400.25. This position is located at the U.S. Army Cyber Protection Brigade at Fort Meade, MD and Fort Gordon, GA.Serve as a Network Analyst on a U.S Army Cyber Protection Team (CPT) in the U.S. Army Cyber Protection Brigade (CPB) monitoring network security to enable cyber security operations.Analyze network architecture by installing, operating, maintaining, configuring, testing, and securing hardware and software-based routers, switches, firewalls, and various operating systems to enable network hardening recommendations.Provide expert technical support to enterprise-wide and local network technicians to identify and resolve cyber defense incidents.Interpret provided network diagrams, run local scanning software, and encompass sensor related data to create logical, physical, and persona-based diagrams utilized by the Cyber Protection Team during missions.Survey and evaluate network traffic to identify baselines to facilitate locating adverse network trends, anomalous traffic, or malicious cyberspace activity (MCA).Provide technical advice, guidance, and assistance on a wide range of complex cybersecurity issues and distribute information pertaining to cyber related threats impacting the Department of Defense Information Network (DoDIN).Develop Army and Department of Defense incident response and threat mitigation countermeasures, friendly network forces prioritization, and operational assessments.Defend and clear critical assets, Mission Relevant Terrain (MRT) or Key Terrain Cyber (KT-C) either remotely or by deploying to the affected location as needed.Coordinate with network owners, local network defenders, and Cyber Security Service Providers (CSSP) to develop methods for the timely and accurate reporting and implementation of defensive countermeasures.Assess the effectiveness of clearing and hardening actions by replicating threat intrusion actions to ensure vulnerabilities were mitigated.Attend meetings, video teleconferences, and working groups, which require routine and recurring access to Top Secret Sensitive Compartmented Information (SCI) materials, equipment, facilities, and programs.