Cyber Exercise Analyst 3, Ohio Cyber Range Institute, School of Information Technology, CECH

The School of Information Technology is a national leader in studying solutions and needs that

connect people, information, and the technology of the time. The SoIT (School of Information Technology) is home to Ohio's first Master of Science and Doctor of Philosophy degrees in Information Technology. In addition, it is home to Ohio's first ABET accredited Bachelor of Science in Information Technology and a Bachelor of Science in Cybersecurity. The SoIT has been growing at 20% annually and currently serves more than 2,000 students with 35 full-time faculty members, 35 full-time staff, and 37 adjunct faculty. The SoIT is home to several centers including an NSA/DHS Center for Academic Excellence in Cyber Defense, the Information Technology Solutions Center, the Ohio Cyber Range Institute, Applied Machine Learning and Intelligence Center, and the Smart Synergies Lab.

The SoIT is a diverse, interdisciplinary, team-oriented, dynamic, and

entrepreneurial environment. It empowers individuals to become passionate, solution-minded Information Technology professionals by fostering continuous innovation, research, leadership development, interdisciplinary problem solving, and real-world experience. More information about the school can be found athttp://cech.uc.edu/it.

The Ohio Cyber Range Institute (OCRI), housed at the University of Cincinnati, is a partnership among state agencies and academic institutions led by UC, the Ohio Adjutant General and Cyber Ohio. OCRI's mission is to advance cybersecurity education, workforce, and economic development. OCRI administers the Ohio Cyber Range as a state-wide tool that supports programming for K-20 courses and events; full-spectrum training opportunities, including incident response teams; industry workforce and economic development; cyber security research; as well as government agency support among other programs.

The School of Information Technology at the University of Cincinnati seeks to hire a Cyber Exercise Analyst 3 for the Ohio Cyber Range Institute to

support the Ohio Persistent Cyber Improvement for Local Government Project (O-PCI), funded by the State of Ohio through a U.S. Department of Homeland Security Cyber and Infrastructure Security Agency State and Local Cyber Improvement Grant. We are looking for a mission driven, team oriented, extremely ambitious individual who wants to serve, make a difference, and strives to perform at competitive levels of excellence. This is a grant-funded position; the continuation of this position will be based on the availability of funds and the continuation of the grant.

Under general supervision from the OCRI Associate Director, the OCRI Cyber Exercise Analyst 3 will serve as the subject matter expert for cyber exercises including capture the flags, tabletop exercises, and red vs blue full-scale exercises. The position will enhance and support the University's research and programming activities within the cyber realm. The position will support the divergent functions of the OCRI including academic, communication, reporting, and other strategies as developed by the executive staff team.

• Plan, lead, and execute exercises against stakeholders
• Oversee day-to-day operations and track ongoing exercises, assigning, tracking, meeting the exercise timelines.
• Develop a deep technical understanding of Ohio Cyber Range offerings and infrastructure
• Assist with reporting operational activities, including outcomes and metrics, to security leadership
• Engage in security monitoring and visibility improvement activities across the Ohio Cyber Range organization
• Create and document tactics, techniques, and procedures (TTPS) used
• Discover training needs and create coaching plan to upskill the team
• Communicate with various business and technology leaders to interpret identified vulnerabilities and assist in the development and planning for risk mitigation plans.
• Research and continuously improve skills in attacker tools, tactics, techniques, and procedures (TTPs)
• Lead by example for the greater red team in professionalism, communication, and technical expertise

• Bachelor's degree in business, leadership, engineering, computer science or information systems/technology or related field.

Three (3) years of demonstrated experience in planning or executing cyber exercises

• Demonstrates a strong understanding of offensive cybersecurity operations and defensive integrations, including enumeration and exploitation of various cloud-based technologies and development of secure applications.
• Demonstrates a strong ability to communicate highly technical aspects to executives and other IT staff, respectively.
• Demonstrates strong experience with various scripting languages (Python, Ruby, Bash, etc.). Possess one or more of the following credentials: OSCP, OSCE, OSWE, GWAPT, GXPN
• Familiarity with serverless services, containerization, and other cloud technologies
• Strong familiarity with MITRE ATT&CK and the Cyber Kill Chain.

Applicants should submit a resume, a cover letter, and a list of three references.