Computer Network Defense Analyst

Cb•Columbus, OH

3d•Onsite

About The Position

SarelaTech is seeking a Computer Network Defense (CND) Analyst to support the Defense Logistics Agency (DLA) Enterprise Cyber Security Service Provider (CSSP). The selected candidate will provide enterprise-level cyber defense support for continuous monitoring, threat detection, incident response, and defensive cyber operations across government information systems and network infrastructure. Working as part of a 24x7x365 cybersecurity operations team, the CND Analyst will identify, analyze, investigate, contain, and respond to cybersecurity events while supporting enterprise network defense, threat hunting, malware analysis, incident reporting, and continuous process improvement. The position supports the protection of government systems by maintaining the confidentiality, integrity, availability, and resilience of enterprise networks, applications, and data.

Requirements

Top Secret security clearance with SCI eligibility.
Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related technical discipline.
Five (5) or more years supporting Cyber Network Defense (CND), SOC, Incident Response, or Defensive Cyber Operations.
Two (2) or more years of performing incident investigation, root cause analysis, and network or system log analysis.
Experience utilizing SIEM platforms, IDS/IPS technologies, packet analysis, threat intelligence, and cybersecurity monitoring tools.
Strong understanding of Incident Response methodologies, malware analysis, threat hunting, digital forensics, and enterprise cyber defense principles.
Strong written and verbal communication skills.

Nice To Haves

Experience supporting the Defense Logistics Agency (DLA), DISA, or other DoD organizations.
Experience supporting Cyber Security Service Provider (CSSP), Security Operations Center (SOC), or Computer Emergency Response Team (CERT) operations.
Knowledge of MITRE ATT&CK, NIST SP 800-61, NIST SP 800-53, DISA STIGs, and DoD cybersecurity policies.
Experience developing SIEM correlation rules, IDS/IPS signatures, or enterprise detection capabilities.
Experience with PowerShell, Python, Bash, Perl, or similar scripting.
Experience participating in cybersecurity exercises and developing After Action Reports (AARs).
Professional certifications such as Security+, CySA+, CEH, GCIH, GCFA, CISSP, or equivalent.

Responsibilities

Monitor, analyze, investigate, and respond to cybersecurity events, alerts, and incidents affecting enterprise networks, systems, applications, and data in accordance with established Incident Response procedures.
Perform proactive threat hunting and cybersecurity analysis utilizing SIEM platforms, IDS/IPS, system logs, packet captures, forensic tools, and threat intelligence to identify malicious activity and emerging threats.
Conduct incident triage, root cause analysis, containment, eradication, recovery, and post-incident reporting while ensuring compliance with established Standard Operating Procedures (SOPs) and Tactics, Techniques, and Procedures (TTPs).
Develop, tune, and maintain cybersecurity detection capabilities, including SIEM correlation rules, IDS/IPS signatures, and other defensive security countermeasures.
Perform malware analysis and support forensic collection, preservation, and analysis of digital evidence.
Prepare incident reports, After Action Reports (AARs), lessons learned documentation, and operational metrics.
Coordinate cybersecurity incident reporting, escalation, and notifications with government stakeholders.
Support cybersecurity readiness through tabletop exercises, continuous process improvement, and cybersecurity awareness training.