Cyber Watch Data Analyst with Security Clearance

Dorrean is currently recruiting for a Cyber Watch (CyWatch) Data Analyst to support a Federal Agency in a contract role located in Fairmont, WV
The Cyber Watch Data Analyst shall perform the following tasks:
• Review all information for completeness, accuracy, and consistency
• Review incoming IC3 complaints for classification purposes, actioning complaints as directed
• Continuously review data to make recommendations for continued and improved methods of Contractor QC and the Government quality analyst
• Enforce data compliance with data record standards
• Incidents and complaints require multiple stage processes (such as, but not limited to received, draft-state, submitted status). Assigned incidents/complaints shall be created and moved from the draft state to submitted status for opening pursuant to established policy and procedures
• Compare data with data in the system of record as well as other source documents originating from OGAs and shall ensure details match to prevent duplicate records and provide quality control (QC) for the process
• Coordinate with the CyWatch Government Team Lead (GTL) to ensure problem solution and appropriate training
• Provide technical and administrative guidance for personnel performing tasks, including the review of work products for correctness, adherence to user standards, review of documentation to assure Government standards / requirements are adhered to
• Provide short or long-term support as directed by the GTL in furtherance of the CyWatch mission
• Perform administrative contract duties as necessary
• Receive, analyze, and interpret preliminary threat information (cyber and others deemed necessary to the mission)
• Serve as contract Team Lead on each shift
• Serve as Emergency Relocation Group (ERG) participant in case of COOP situation
CyWatch Operations Duties:
• Perform data management as directed
• Review and process complaint data as directed, including cyber threats; those actionable via the financial fraud kill chain; and other high-priority matters
• Maintain distribution lists for situational awareness reporting, sharing, and coordinating information across OGAs, and other external interested parties utilizing unclassified and classified systems as directed
• Transfer data between enclaves with the approval of the GTL when transferring from an enclave of higher classification to an enclave of lower classification and in accordance with established Data Transfer Officer (DTO) procedures
• Follow policies to include procedures that execute the duties of the watch
• Identify improvements to watch floor processes
• Coordinate cyber threats and incidents with other Federal cyber centers, the Cyber Division, Field Offices, the intelligence, and Law Enforcement (LE) communities, and internally, as directed
• Participate in a cross Government cyber community that involves state, local, and Federal LE and the Intelligence Community (IC) and coordinate internally with other Federal cyber centers regarding ongoing CyWatch priorities and activities, cyber incidents, and investigations as directed
• Monitor multiple communications nodes on unclassified and classified enclaves based on computer notification and information sharing applications; multiple telephonic communications circuits; other inter-and-intra-agency communications systems for reports concerning cyber centric advisories, threats, and attacks
• Monitor multiple communication nodes for updates concerning previously reported threats, incidents, and advisories
• Provide research and basic analysis using multiple communication nodes as directed
• Maintain situational awareness of emerging and/or developing threats, cyber incidents, identification of cyber victims, open-source media for cyber priorities, supporting ongoing investigations and intelligence activities
• Respond to preliminary cyber threat information pursuant to established procedures
• Provide primary assessments on cyber incidents as they come to the attention of the watch floor to prioritize and properly administer them pursuant to established procedures
• Provide all-source analytical support to augment monitoring activities, critical technical collection and the development of preliminary analytical conclusions and reporting -- this includes using available databases and open-source resources and systems to provide and enhance threat information for incidents that are germane to interests
• Provide additional information, for each incident that is of value, to the units that will handle the incident
• Receive preliminary threat information (cyber and others deemed necessary to the mission)
• Provide all-source situational awareness and reporting for developing threats, cyberattacks, and ongoing federal agency cyber centric responses
• Utilize the CyWatch tracking systems pursuant to established procedures
• Maintain situational awareness of developing threats, cyber-attacks, and ongoing Federal agency cyber centric responses
• Prepare and deliver CyWatch products as directed including documentation preparation, writing, editing, and production coordination and graphics of CyWatch products
• As directed, perform closed source research utilizing internal systems as well as other IT systems to which the organization has access to
• Maintain daily logs pursuant to established procedures
• Maintain daily logs of phone calls pursuant to established procedures
• Maintain daily logs of in-person meetings pursuant to established procedures
• Assist in the formulation of replies, responses, and further disseminations of threat information received
• Transfer data to the appropriate system of record
• Perform open-source research as directed
• Assist with documentation preparation
• Participate in briefings as directed for the organization and other Federal agencies and departments in relation to current cyber threats, incidents, or investigations
• Complete any mandatory trainings as indicated by the GTL
Requirements:
• Bachelor’s degree from an accredited university or college with five (5) years or more of data analysis experience
Educational requirement may be waived if the candidate has eight (8) or more years of experience
• Five (5) years Microsoft Office Suite, SharePoint, Microsoft Access, and Adobe Acrobat
• Competence to review, interpret, and evaluate documents
• Active Top Secret Clearance
Dorrean provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws
This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation and training
Dorrean provides benefit options to employees that include Medical, Dental, Vision, and Prescription coverage
Additional benefits include Flexible Spending Accounts, Supplemental benefit options, commuter benefit options, subsidies for professional development, and a 401(k)-retirement plan.