Cyber
I am a cyber warfare officer in the U.S. Army, serving as a Cyber Protection Team Lead in the Cyber Protection Brigade.
What I do
Cyber Protection Teams defend networks by hunting for adversary activity, hardening what they find, and leaving the owners of that network better able to defend it themselves. My part of that is leading the team and making sure the analysis behind our conclusions holds up.
- Defensive cyber operations
- Planning and leading hunt and hardening missions.
- Detection analytics
- Turning adversary techniques into analytics that can be tested against real data.
- Analyst tooling
- Notebooks and scripts that make an analyst's work repeatable.
The Analytic Support Officer work role
The Analytic Support Officer (ASO) is the team's lead for data and analytics. The ASO works out what data a mission needs, lays out the analytic scheme of maneuver that ties each adversary technique to the data and the analytic that would reveal it, and proves those analytics before the team relies on them.
I have been building reference material for this work role. It will be posted here once it has been cleared for public release.