Cyber Countermeasure Specialist (TN22)

Location: Full-time onsite at Ford Island, Joint Base Pearl Harbor-Hickam, HI; telework is not permitted. Relocation expenses may be eligible for reimbursement of up to $10,000. Travel is required approximately 10% of the time.

Salary: $115,000–$150,000 annually, depending on experience and position level. A $10,000 sign-on bonus may be available subject to a 12-month commitment.

Company

hirify.global provides security compliance, program governance, consulting, and customized solutions for public sector clients.

What you will do

• Design, test, validate, deploy, and maintain custom detection and prevention signatures, firewall rules, ACLs, and automated blocking mechanisms.
• Tune perimeter defenses across DISA enterprise boundaries, cloud access points, DMZs, SIEM platforms, and specialized networks.
• Analyze telemetry, blocked and allowed traffic, false positives, false negatives, and root causes to improve defensive controls.
• Manage the lifecycle, tracking, de-confliction, rollback, and reporting of countermeasures in accordance with government procedures.
• Develop countermeasures for AWS GovCloud, Azure Government, Google Cloud Platform, Oracle Cloud Infrastructure, Zero Trust environments, and Microsoft Defender.
• Operate in SCIF environments and coordinate defensive responses across PMN, JOE-CE, JWICS, YLAN, DISA, USPACOM, USCYBERCOM, and partner organizations.

Requirements

• Active DoD Top Secret clearance with SCI eligibility is required; Secret clearance may be acceptable with government approval.
• Bachelor’s degree with 2+ years of relevant experience for Level II or 4+ years for Level III, with equivalent associate-degree or professional/military experience pathways available.
• Valid DoD 8140.03 / DCWF Work Role Code 521 baseline certification or compliant degree before the start date.
• Experience writing, testing, and deploying custom intrusion signatures using technologies such as Snort, Suricata, YARA, or Zeek, plus firewall and ACL configuration.
• Knowledge of Cisco FirePOWER Management Center, IDS/IPS appliances, proxy and web content filtering, network protocols, Wireshark, and tcpdump.
• Ability to participate in an on-call rotation and obtain a required Computing Environment certification within six months.

Nice to have

• Experience supporting DISA or military cyber components.
• Experience developing SOAR playbooks and automated incident response workflows.
• Scripting experience with Python, PowerShell, Bash, or regular expressions.
• Knowledge of EDR platforms including Microsoft Defender for Endpoint, Tanium, or CrowdStrike.
• Familiarity with DoD security policies and Rally incident tracking.

Culture & Benefits

• Medical, dental, and vision coverage options.
• Paid time off, paid holidays, and paid parental leave.
• Pre-tax and Roth retirement savings accounts.
• Life insurance, short- and long-term disability coverage, and employee assistance services.
• Tuition and training reimbursement, plus flexible and dependent care savings accounts.