Computer Defense Network Analyst

Seneca Holdings•Mechanicsburg, PA

6h•Hybrid

About The Position

Seneca Technologies is hiring a Computer Network Defense (CND) Analyst to support cybersecurity operations in a Department of War agency contractor environment. The analyst monitors, analyzes, and responds to network and security events across enterprise environments, helping protect information systems through continuous monitoring, threat detection, vulnerability assessment, incident analysis, and reporting. The role also contributes to the agency’s cyber defense posture by identifying risks, performing control gap analyses, supporting SOC activities, and improving cybersecurity processes and monitoring strategies. The position is based in Mechanicsburg, Pennsylvania. Remote work may be authorized, but remote employees must live within commuting distance of an approved SIPRNet access location and be available to support classified work as needed. The role requires an active Secret clearance and some CONUS travel.

Requirements

Demonstrated experience in cybersecurity monitoring, threat detection, incident analysis, or Security Operations Center environments.
Ability to analyze and interpret security events, logs, alerts, and vulnerability findings.
Experience performing control assessments and identifying security gaps in enterprise environments.
Strong analytical, problem-solving, and communication skills.
Ability to work independently and collaboratively within a mission-focused team.
U.S. citizenship and ability to obtain and maintain required government security clearances, as applicable.
Current Secret clearance.
An associate’s or bachelor’s degree in Cybersecurity, Computer Science, Information Systems, or a related technical field, plus at least four years of experience in cybersecurity monitoring, cyber defense, incident response, or SOC operations; alternatively, at least six years of directly relevant cybersecurity, computer network defense, or SOC experience in lieu of a degree.
One or more of the following certifications: CompTIA Security+ CE, CompTIA CySA+, GIAC Certified Incident Handler (GCIH), Splunk Core Certified User or equivalent Splunk certification, or a comparable cybersecurity operations certification.
Knowledge of SIEM and log management platforms, including Splunk, ArcSight, or comparable platforms.
Knowledge of vulnerability and security monitoring tools, including Tenable Nessus, AWS Inspector, AWS GuardDuty, and enterprise network and security monitoring tools.
Knowledge of CND operations, security event monitoring and analysis, threat detection and incident escalation, vulnerability management, network security principles and protocols, continuous monitoring programs, cybersecurity metrics and reporting, security control assessments and gap analysis, cloud security monitoring and AWS security services, and incident response processes.

Responsibilities

Monitor security platforms, dashboards, and alerts to identify potential cyber threats, vulnerabilities, and suspicious activity.
Analyze security events and indicators of compromise; investigate and escalate incidents according to established procedures.
Conduct control gap analyses to identify security-control weaknesses and recommend mitigation strategies.
Support Security Operations Center activities, including continuous monitoring and cyber defense operations.
Use vulnerability management and cloud security tools to assess and prioritize risks across enterprise systems.
Develop and maintain cybersecurity dashboards, metrics, reports, and operational status updates for leadership and stakeholders.
Review and correlate data from multiple security sources to identify trends, emerging threats, and areas requiring remediation.
Collaborate with system owners, network engineers, enterprise architects, and cybersecurity teams to improve security posture.
Assist with incident response, including triage, documentation, containment, and post-incident reporting.
Contribute to continuous monitoring strategies, standard operating procedures, and cybersecurity best practices.
Support compliance, audit, and assessment activities related to Department of Defense cybersecurity requirements.