• Support planning, assessment, and implementation of Zero Trust principles across classified environments • Evaluate identity, device, network, application, and data protection controls • Assess Zero Trust maturity against DoD Zero Trust reference architectures • Provide recommendations to reduce implicit trust and strengthen access control enforcement • Oversee SIEM and SOAR operations for classified networks • Analyze security logs, alerts, and correlated events to identify threats and anomalous behavior • Perform traffic pattern analysis to detect lateral movement, unauthorized activity, and data exfiltration risks • Support incident response investigations and forensic analysis • Oversee vulnerability management and advanced vulnerability analysis efforts • Assess mission risk across enterprise, tactical, and mission networks • Ensure the security posture of complex, interconnected classified systems • Cloud Security: Configure and manage AWS Security toolsets (CloudTrail, GuardDuty, Inspector, Security Hub) • Provide technical guidance to engineering, operations, and compliance teams • Support cybersecurity strategy development and continuous process improvement • Stay current with emerging threats, adversary TTPs, and evolving DoD cybersecurity guidance