Cyber Defense Operator - Security Technologies

- Review all IDS/IPS alerts in accordance with AFCERT Operating Instructions and checklists - Conduct host security monitoring and intrusion detection analysis - Develop and maintain monitoring procedures for Hosts/Systems - Comply with third-party monitoring and reporting requirements - Analyze host DCO events for higher-level analysis - Monitor security sensors and correlate security issues/events - Document suspicious activity in the case management system - Conduct triage of alerts to make quick and accurate decisions - Enter event data into mission support systems - Provide monthly performance metrics and reports - Escalate security incidents as per established protocols - Generate end-of-mission reports for knowledge transfer - Support AF field units in improving the security posture of networks and systems - Conduct 24/7 network security monitoring with minimal error - Train other personnel and maintain updated documentation - Analyze and report on operational communication from external agencies - Execute security checks and report anomalies to the Crew Commander - Maintain awareness of industry trends and provide assessments on tactics and procedures - Participate in planning and debriefing tasks as required - Execute approved scoping and response actions against targets - Analyze threat intelligence for actionable insights - Provide support to the CDO Mission Lead and track mission tasks