Computer Network Defense Analyst (EAIRS)

Horizon Industries • Columbus, OH

6d • Onsite

About The Position

Horizon Industries Limited is seeking a Computer Network Defense Analyst to support DLA Cybersecurity and perform CSSP functions, including incident response and cybersecurity content development, with a focus that includes externally hosted programs and applications. The analyst coordinates with DLA stakeholder groups to ensure incident handling is conducted across the enterprise and protects DLA data, networks, and applications, both internally and externally hosted, in accordance with DoD directives.

The role monitors DLA’s SIEM and other cybersecurity monitoring tools to detect and respond to threats across DLA’s Enterprise Network Environment. It also provides technical analysis and sustainment support for enterprise information assurance tools and applications, and helps apply Defense-in-Depth signatures and perimeter defense controls to reduce network threats. This position is fully onsite in Columbus, Ohio, and works the second shift, 4:00 PM to 12:30 AM. An active Top Secret clearance is required.

Requirements

• Five years of relevant cybersecurity or IT experience.
• Two years performing root cause analysis of cybersecurity events and incidents.
• Working knowledge of at least two types of security tools, such as firewalls, IDS/IPS, host-based antivirus, data loss prevention, vulnerability management, forensics, malware analysis, or device hardening.
• Understanding of Defense-in-Depth.
• Ability to build scripts and tools to enhance threat detection and incident response capabilities.
• Active DoD Top Secret clearance.
• A relevant certification meeting DoD 8570.01 IAT Level II; one of the following: CCNA-Security, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP.
• Must maintain CNDSP/CSSP-IR.
• Must obtain one of the “Computer Network Defense” CE certifications within six months of onboarding.

Nice To Haves

• Experience building scripts and tools preferably in SPL, Python, or PowerShell.

Responsibilities

• Participate in 24x7x365 monitoring of DLA’s SIEM and other cybersecurity monitoring tools to detect and respond to cybersecurity threats.
• Protect, monitor, detect, analyze, and respond to unauthorized activity.
• Use cybersecurity capabilities and deliberate actions to respond to specific alerts or emerging threats.
• Review logged events for trends indicative of attack or compromise.
• Monitor logs and traffic for Advanced Persistent Threats and “low and slow” attacks.
• Maintain awareness of possible threats using intelligence resources, including Open-Source Intelligence (OSINT).
• Provide technical analysis and sustainment support for enterprise information assurance tools and applications.
• Assist with applying Defense-in-Depth signatures and perimeter defense controls to diminish network threats.
• Perform incident response and cybersecurity content development for DLA, including work related to externally hosted programs and applications.
• Coordinate with DLA stakeholder groups to ensure enterprise incident handling protects DLA data, networks, and applications in accordance with DoD directives.
• Build scripts and tools to enhance threat detection and incident response capabilities.

Benefits

• Healthcare coverage, including medical, dental, vision, and disability.
• 401(k) program with 100% vesting from day one and an employer match after 90 days.
• Educational Assistance program.
• Student Loan Repayment Program.
• Gym Reimbursement Program.
• Paid time off.
• Training and certification support.
• Personal career coaching and mentoring opportunities.
• Personal and professional development opportunities.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed