Defensive Cyber Operations SME

Tyto Athene, LLC

Defensive Cyber Operations SME at Tyto Athene facilitating operational effectiveness for US Space Force. Improving cybersecurity capabilities through expertise, planning, and incident response.

Posted 7/21/2026full-timeColorado Springs • Colorado • 🇺🇸 United StatesMid-LevelSenior💰 $115,000 - $130,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Cybersecurity Monitoring, Incident Response, and DCO-Space capabilities, with a strong focus on improving operational effectiveness and implementing best practices. Proficient in utilizing tools such as ELK Stack and Splunk to enhance cyber defense strategies.

Highest-signal resume keywords

Cybersecurity MonitoringIncident ResponseELK StackDoD 8570.07-M CertificationContinuous Cybersecurity Monitoring

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cybersecurity AnalystIntrusion DetectionCyber Incident ResponseContinuous Cybersecurity MonitoringDCO Tactics, Techniques, and Procedures

Tools & Technologies

ELK StackSplunkKibanaSuricataSnortWiresharkLogRhythmEPo/HBSSACASMicrosoft Office 365

Certifications & Qualifications

CEHCySA+GCIHGCIACCNA Cyber OpsCCNA-SecurityGICSPCloud+SCYBERCASP+ CE

Industry Keywords

Cyber Security Services ProviderDCO-Space CapabilitiesCyber Incident Response TeamsSpace OperationsCyber Defense Remediation

Tech Stack

Tools & technologies

CloudCyber SecuritySplunk

About the role

Key responsibilities & impact

Support development, improve proficiency, and increase operational effectiveness of USSF Cyber Squadron personnel
Provide cyber defense remediation and mitigation implementation recommendations in support of all incidents/events
Participate in the planning process for Operational Planning Teams (OPTs) and crew shift planning
Draft and validate accuracy of squadron level DCO Tactics, Techniques, and Procedures (TTPs)
Conduct analysis on new DCO-Space capability releases
Provide recommendations for exercises and mission rehearsals
Maintain proficiency by performing DCO crew operation for assigned space mission systems
Provide expertise for DCO-Space capabilities such as SIEM, Intrusion Detection and Prevention Systems, ELK Stack, Endpoint Protection Systems
Advise and assist with cyber incident response processes IAW squadron policies
Participate in Government-established Cyber Incident Response Teams (CIRTs) and provide technical assistance
Recommend cyber incident response best practices to improve TTPs, processes, and policies

Requirements

What you’ll need

Minimum of one (1) active DoD 8570.07-M Cyber Security Services Provider (CSSP) 'Analyst' or 'Incident Responder' certifications: CEH, CySA+, GCIH, GCIA, CFR, CCNA Cyber Ops, CCNA-Security, GICSP, Cloud+, SCYBER, PenTest+, CHFI or GCFA
Six (6) years of Cyber Security Analyst work experience (or equivalent)
Experience includes Cybersecurity Monitoring; Cybersecurity Analyst; Intrusion Detection and/or Cyber Incident Response
Experience performing Continuous Cybersecurity Monitoring, Intrusion Detection and Cyber Incident Response
Experience with the following tools: ELK Stack, Kibana, Suricata, Splunk, Snort, Wireshark, Bro/Zeek logs, tcpdump, editcap, LogRhythm, ePo/HBSS, ACAS, SolarWinds, Microsoft Office 365, Active Directory WMIC commands
Cybersecurity Service Provider (CSSP) experience is preferred
Desired: Eight (8)+ years of relevant cybersecurity experience
IAT Level III Certification required IAW DoD 8570.07-M
Qualifying certifications include: CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP
Familiarity with Space Operations is highly desired

Benefits

Comp & perks

Health/Dental/Vision
401(k) match
Paid Time Off
STD/LTD/Life Insurance
Referral Bonuses
Professional development reimbursement
Parental leave