Shire Jobs

Security Clearance required:

TS/SCI

Do you want to make a difference?

Cognosante employees are passionate about improving people’s lives. With an innovative mindset and an unwavering commitment to those we serve, we partner with healthcare, civilian and defense agencies to deliver exceptional public services and programs. Our multi-faceted technology and customer experience (CX) solutions achieve program outcomes, solve critical challenges and create meaningful change. Whether we are helping Veterans access healthcare faster, ensuring that members of the military complete their missions safely, or helping people obtain health insurance, our work touches millions of people. Are you ready to make a difference?

Come Join Our Team

Fast-paced and rewarding environment supporting regional defense efforts. This project will provide defensive cyberspace operations (DCO) support to Defensive Cyberspace Operations Division (DCOD), US Army Regional Cyber Center-Korea. The DCOD environment includes any hardware, software, application, tool, system, or network used by the Government, whether developed, leased, or commercially purchased. On-site in Korea.

What is the position?

As the Live Incident Handling Analyst, you will be required to defend against unauthorized activity on all Army assets residing on the NIPRNet and SIPRNet. You will work on current and new systems at various lifecycle stages, and any future applications/systems not currently identified. You will analyze and prepare reports on activities from external hackers who may attempt to gain unauthorized access, insider threat attempts for unauthorized access, and policy violations that may impact network security and operations.

What will I get to do?

You will provide DCO Network Security Monitoring, Detection, and Analysis; coordinate, de-conflict, and employ internal defensive measures within the DoDIN; assess new technologies and devices relevant to DCO, conduct exploratory and in-depth analysis of network traffic from security devices, analysis of host based audit logs, malware analysis, trending of incident reports, correlation of classified and open source threat reporting, and linkages/integration with other DCO agencies. You will analyze and correlate anomalous events identified in, Security Information Event Management (SIEM) systems, Big Data Analytics, and supporting devices/applications. You will recognize a cyber security incident, taking appropriate action to report the incident and preserve evidence, mitigating any adverse impact, and devising defensive measures, perform initial analysis on captured volatile data, log data, captured network traffic data, etc. to identify any immediate intrusion related artifacts which in turn will allow immediate defensive countermeasures to be implemented. You will report incidents to law enforcement and counterintelligence agencies and implement mitigation measures in response to general or specific Advanced Persistent Threats (APT), (attempted exploits/attacks, malware delivery, etc.) on the respective networks. You will participate in Incident Response investigations for the operational environment (unclassified and classified) and provide situational awareness of evolving network threats trends. You will synchronize DCO programs with ARCYBER personnel as required via working group participation to develop, research, publish, test, and annually update Deliverables, Standard Operating Procedures and Tools, Tactics, Techniques and Procedures (TTTP) related to Cyber Defense, Live Incident Handling Analysis, Cyber Threat Analysis, Threat Detection, Computer Defense Assistance Program (CDAP), and the Cyber Intrusion Analysis Program (CIAP). You will participate in ARCYBER Cyberspace Operations (CO) meetings, conferences, and working groups and support Disaster Recovery (DR) and Continuity of Operations (COOP) Capability. You will support Cybersecurity Service Provider (CSSP) accreditation and participate, if tasked, in exercises and assist with the development, planning and support of exercises such as Gaining Cyber Dominance or other cyberspace defense engagements. This is 24/7 x 365 Rotating Shift Work.

What qualifications do I need?

• Active TS/SCI clearance

• DoD 8140 Certification requirements

• Bachelor degree or higher from an accredited college or university (Computer Science, Cyber Security, Information Technology, Software Engineering, Information Systems, or Computer Engineering degree; or a degree in a Mathematics or Engineering field) or CCSP or CEH or CFR or Cloud+ or CySA+ or GCED or GICSP or PenTest+.

What We Offer  

Our mission is to provide comprehensive and competitive pay, benefits, services, and programs to eligible employees and their dependents that: 

• Ensure optimal health and productivity of our employees  

• Support employee retention and attraction 

• Provide work/life balance to ensure our employees succeed inside and outside of the office 

Compensation

$74,436.56 - $119,096.32

The pay range for this job is determined by various factors, including but not necessarily limited to location, responsibilities of the job, and alignment with market data. When determining a salary for this role, the following factors may be taken into consideration - contract-specific affordability, education, knowledge, skills, competencies and experience. The estimate displayed represents the salary range for this position and is just one component of Cognosante’s total compensation package for employees. It is not necessarily reflective of actual compensation that may be earned, nor a promise of any specific pay for any specific employee.

Cognosante will not provide sponsorship for employment-based immigration benefits for this position.

What We Promise  

Cognosante employees are inspired by our bold mission to improve lives. To achieve this mission, we put our people first. No matter where they're located around the nation, our innovative workplaces enable individuals to apply their skills and experience to work toward a greater good.

We foster a winning culture of solution creators built on innovation, collaboration, flexibility, and work-life balance. And we invest in the next generation of diverse talent to foster an inclusive, progressive, adaptable workplace that prioritizes advancement for all. As an affirmative action employer, we are committed to equal opportunity regardless of race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.  

Your safety during your job search is important. Recruiting communications will always be sent through one of the following corporate domain emails (@cognosante.com or @accurate.com).

We will never send communications through any other domain, including @cognosantecareers.com, @gmail.com or @yahoo.com). We will never request payment from you, nor will we send payment to you, prior to your start date. If you have been asked to send or receive any payment, or if you have any doubt about whether you have been contacted by a Cognosante employee, please contact us at jobs@cognosante.com

At Cognosante, we innovate with purpose. Each day, we create meaningful change by delivering mission-driven solutions for healthcare, civilian, and defense government agencies. When you work at Cognosante, you’ll apply your talents and grow your career with an organization that believes in the missions of our customers – and the right every employee has to an inclusive, flexible, and collaborative workplace. Work with us, and you’ll be challenged and supported—and have the platform to elevate your career to wherever your professional aspirations lead.​

Get to know Cognosante employees

• We’re driven by our customers’ missions, and measure success by how we improve lives.

• We believe innovative solutions start with an innovative culture.

• We believe customer understanding is the key to creating innovative solutions.

• We know we are stronger together, and we value the diversity of our people.

• We believe growth should be a core job benefit.

Like many other companies, Cognosante has been targeted by scammers making fraudulent job offers to potential candidates. As shared on our company website (https://cognosante.com/careers/) , communications from Cognosante recruiting are only sent with an official corporate domain email (e.g., @cognosante.com) and not a commercial domain e-mail (e.g., @gmail.com or @yahoo.com)). We will never request payment from an applicant, nor will we send payment to an applicant, prior to that individual’s start date.

We want to recommend a couple of ways that you can report this incident and take action against these scams:

-The FBI: File a Complaint (https://www.ic3.gov/Home/FileComplaint)

-The FTC: Report Fraud (https://reportfraud.ftc.gov/#/)

Also, if you're not sure where to report the scam, you can find some guidance here: Where to report scams | USAGov (https://www.usa.gov/where-report-scams) .