Cybersecurity Engineer (CDAP) - Senior

Position Summary

ECS is seeking a Cybersecurity Engineer (CDAP) - Senior to support the Army National Guard (ARNG) Enterprise Network Operations and Cybersecurity Support (ENOCS) program. This role supports Task 3 — Cybersecurity Operations Support by implementing and maintaining CDAP data ingestion pipelines, connectors, and analytic components that enable enterprise security monitoring across the ARNG environment. The Cybersecurity Engineer (CDAP) assists with platform configuration, troubleshooting, performance validation, dashboard integration, and configuration change documentation, helping deliver the continuous monitoring, threat detection, and cybersecurity engineering outcomes required for Defensive Cyberspace Operations – Internal Defensive Measures (DCO-IDM). The position works in coordination with broader cybersecurity operations personnel, including SOC, data feed, engineering, compliance, and RMF support functions.

In this role, the selected candidate will help sustain cybersecurity visibility for an enterprise that supports more than 120,000 users and approximately 141,000 endpoints across about 2,800 sites in 54 states and territories. The position contributes to cybersecurity operations supporting both classified and unclassified network environments, aligned to ARNG Title 10 and Title 32 missions, mobilization readiness, domestic emergency response, and SIPRNet-enabled operations. The technical environment includes integrated SIEM/C2C/DLP analytics, USIEM-enabled monitoring and analytics, endpoint and network data sources, continuous monitoring aligned with RMF, and coordination with organizations such as the NETCOM Global Cyber Center and DISA DCDC to strengthen cyber visibility and reporting across the DoDIN-Army-NG area of responsibility.

Please Note: This position is contingent upon contract award.

Responsibilities

• Implement and maintain CDAP data ingestion pipelines, connectors, and analytic components that support enterprise security monitoring across ARNG classified and unclassified environments.
• Configure and troubleshoot CDAP platform components to ensure reliable telemetry flow, analytic performance, and operational reporting in support of Task 3 cybersecurity operations deliverables.
• Validate platform performance and data quality to support continuous monitoring objectives, dependable telemetry ingestion, and accurate security dashboards.
• Integrate dashboard outputs and reporting components to improve visibility for cybersecurity operations, data feed support, and threat-informed analysis.
• Document configuration changes, validation results, and supporting technical artifacts to maintain traceability and support RMF-aligned continuous monitoring requirements.
• Support testing and verification activities for connectors, analytics, and reporting components before operational use or release into the monitoring environment.
• Contribute to integrated SIEM/C2C/DLP analytics by helping sustain data feeds and analytic visibility that support USIEM monitoring and enterprise cyber reporting.
• Coordinate technical activities with cybersecurity operations teams supporting the SOC and related monitoring functions, including alignment with NETCOM Global Cyber Center and DISA DCDC processes as applicable.
• Assist in maintaining telemetry and reporting capabilities that support cybersecurity operations for approximately 120,000 users and 141,000 endpoints across 2,800 sites in 54 states and territories.