Cyber Network Defense Analyst (CNDA)

Sentar•Fort Meade, MD

About The Position

Sentar is seeking a Cyber Network Defense Analyst (CNDA) to perform continuous network security monitoring, intrusion detection, and incident response. The role focuses on protecting network infrastructure from known vulnerabilities, investigating security incidents, and communicating findings to internal teams and external stakeholders. The analyst monitors network activity, analyzes correlated logs and forensic evidence, develops custom Snort rules, and distinguishes legitimate activity from malicious intrusions. The role also includes forensic triage and evidence handling, securing network equipment, collaborating with government and customer personnel to investigate alerts, and documenting incidents through resolution.

Requirements

Active TS/SCI clearance with polygraph.
Required experience varies by education: 10 years with an associate degree, 8 years with a bachelor's degree, 6 years with a master's degree, or 4 years with a doctorate.
Relevant experience in network or system administration, vulnerability analysis, penetration testing, computer forensics, or military cyber defense training.
Proficiency with a wide array of network and information security tools.
Strong understanding of computer systems, client/server environments, LAN/WAN, and network management and monitoring concepts.
Ability to analyze data across traditional networks, cloud environments, and IoT.
Experience securing network hardware such as routers, switches, and servers against vulnerabilities.
Knowledge of intrusion detection systems, firewalls, and network logs.
Ability to analyze and interpret logs, identify intrusions, and distinguish false positives.
Experience with network forensics, vulnerability analysis, penetration testing, and computer forensics.
Experience with cloud environments and automation tools supporting cyber defense operations.
Strong analytical skills to assess network vulnerabilities and propose mitigation strategies.
Excellent verbal and written communication skills.

Nice To Haves

Certified Ethical Hacker (CEH).
GIAC Certified Incident Handler (GCIH).
Certified Information Systems Security Professional (CISSP).
CompTIA Cybersecurity Analyst (CySA+).
GIAC Certified Intrusion Analyst (GCIA).
Offensive Security Certified Professional (OSCP).

Responsibilities

Continuously monitor network activity to detect and respond to potential security incidents.
Conduct intrusion detection and incident response activities.
Analyze correlated log data to identify potential threats or anomalies.
Develop and implement custom Snort rules to enhance network intrusion detection.
Differentiate legitimate network activity from malicious intrusions or compromises.
Analyze event logs and related data to investigate successful intrusions and compromised systems.
Communicate with internal teams and external partners across various levels.
Secure network equipment by implementing measures to mitigate known vulnerabilities.
Correlate forensic findings with network events to develop detailed intrusion narratives.
Conduct forensic triage and assess the scope and potential impact of incidents.
Collect, process, preserve, and analyze computer-related evidence.
Collaborate with government and customer personnel to validate and investigate security alerts.
Document and track incident analysis through resolution, providing detailed reports and findings.

Benefits

Voluntary medical, dental, and vision insurance, with health savings or flexible spending plan options.
Voluntary life, critical illness, accident, and long-term care insurance options.
Group term life insurance and short-term and long-term disability coverage for qualifying employees.
Generous 401(k) match.
Competitive PTO plan that increases quickly with years of service.
Holiday schedule and other leave programs, including bereavement, maternity, jury, and military duty leave.
Mental health awareness programs.
Tuition reimbursement.
Professional development reimbursement.
Recognition and awards programs.
Employee ownership.