Computer Network Defense Analyst

Novul Solutions•Arlington, VA

7d•Onsite

About The Position

We are seeking an experienced Computer Network Defense Analyst to support cybersecurity monitoring, threat detection, incident analysis, and response within a secure Department of Defense (DoD) enterprise environment. The role involves hands-on work with computer network defense, SIEM platforms, IDS/IPS, firewalls, and network traffic analysis. The analyst investigates security threats, analyzes alerts, recommends mitigation strategies, ensures security compliance, and supports enterprise network defense operations. This position is 100% onsite in Arlington, Virginia, with occasional travel as needed.

Requirements

Bachelor's degree and 2+ years of experience in cybersecurity, computer network defense, or security operations; additional experience, education, or training may substitute for a degree.
Strong knowledge of Windows, Red Hat Linux, AWS, Microsoft Azure, enterprise networking, TCP/IP, communication protocols, firewalls, and IDS/IPS.
Experience monitoring security tools, analyzing network events, investigating threats, and recommending incident response and mitigation strategies.
Experience implementing and maintaining application and hardware security configurations following vendor recommendations and DISA security best practices.
Strong analytical, troubleshooting, technical documentation, and communication skills, with the ability to work independently and interact directly with customers.
U.S. citizenship and an active DoD TS/SCI clearance at the start of employment; willingness to undergo a CI Polygraph if required.
Current DoD 8140 IAT Level II or III certification, such as Security+ CE or an approved equivalent.
Ability to work 100% onsite in Arlington, Virginia, with occasional travel as required.

Nice To Haves

Prior Computer Network Defense (CND) experience in large enterprise, DoD, IC, or DISA environments, including support for DISA mission partners, intrusion detection systems, network defense appliances, security alert analysis, and incident documentation in ticketing or case management systems.
Experience with manual system log reviews, SIEM platforms such as Splunk or Elastic, network log analysis, incident response recommendations, disaster recovery, business continuity, and security requirements for enterprise cloud migrations.

Responsibilities

Monitor enterprise networks, security tools, and applications to detect, correlate, and investigate suspicious or malicious activity.
Analyze security alerts, IDS/IPS events, network traffic, and system logs to identify cybersecurity threats and vulnerabilities.
Investigate security incidents, assess potential impact, and recommend appropriate response actions and mitigation strategies.
Document security incidents, analysis, findings, and response recommendations in ticketing systems; perform routine security checks and maintain accurate operational documentation.
Collaborate with infrastructure, network, storage, database, and application teams to strengthen security and support secure cloud migration initiatives.
Assist senior analysts and management with threat forecasting, security trend analysis, and improvements to network defense processes and procedures.
Maintain direct customer communication, independently resolve security concerns, and implement security configurations following vendor recommendations, DISA guidelines, and enterprise security standards.