Cyber Network Defense Analyst (CNDA)

BCMC • Arlington, VA

3d

About The Position

BCMC is seeking Cyber Network Defense Analysts to provide remote and onsite technical assistance, proactive threat hunting, incident response, and investigation and resolution using host-based, network-based, and cloud-based cybersecurity analysis capabilities. The team provides front-line digital forensics and incident response (DFIR) and proactively hunts for malicious cyber activity.

The analyst monitors network activity using information from a variety of sources and analyzes it for suspicious behavior. The work is intended to identify and report events that have occurred or may occur within a network, helping protect information, information systems, and networks from threats.

Requirements

• U.S. citizenship.
• Active TS/SCI clearance.
• Ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) Suitability.
• At least 2 years of direct relevant experience in cyber defense analysis using leading-edge technologies and industry-standard cyber defense tools.
• Experience successfully developing and deploying signatures.
• Experience detecting host- and network-based intrusions using intrusion detection technologies such as Snort.
• Experience implementing incident-handling methodologies.
• Experience implementing protocol analyzers.
• Experience collecting data from a variety of cyber defense resources.
• Experience reading and interpreting signatures, such as Snort signatures.
• Experience performing packet-level analysis.
• Experience conducting trend analysis.
• Bachelor’s degree in Computer Science, Cyber Security, Computer Engineering, or a related field; alternatively, a high school diploma and at least 4 years of network investigations experience.

Nice To Haves

• Python programming experience.
• Strong math and science background.
• Experience with the Carnegie Mellon SiLK tool suite.
• One or more of the following professional certifications: GNFA, GCIH, GCIA, GSEC, CASP+, CySA+, PaLMS, or FedVTE.
• GSEC (SANS401), ArcSight (or another SIEM solution), Network+, or Security+.

Responsibilities

• Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.
• Coordinate with enterprise-wide cyber defense staff to validate network alerts.
• Document and escalate incidents that may have ongoing or immediate environmental impact, including their history, status, and potential impact.
• Perform cyber defense trend analysis and reporting.
• Correlate events using information from enterprise sources to establish situational awareness and assess the effectiveness of observed attacks.
• Provide daily summaries of network events and activity relevant to cyber defense.
• Receive and analyze network alerts from enterprise sources and determine possible causes.
• Detect, identify, and report possible attacks, intrusions, anomalous activity, and misuse, distinguishing them from benign activity.
• Use cyber defense tools to continually monitor and analyze system activity for malicious activity.
• Analyze malicious activity to determine exploited weaknesses, exploitation methods, and effects on systems and information.
• Identify and analyze network traffic anomalies using metadata.
• Validate intrusion detection system (IDS) alerts against network traffic using packet analysis tools.
• Identify network-device applications and operating systems based on network traffic.
• Reconstruct malicious attacks or activity from network traffic.
• Identify network mapping and operating system fingerprinting activities.
• Assist in constructing signatures for cyber defense network tools in response to new or observed threats.

Benefits

• Extremely competitive salary.
• 95% employer-paid employee medical, dental, and vision coverage.
• 100% employer-paid employee life, short-term disability, and long-term disability coverage.
• 401(k) with company match and profit sharing.
• Flexible Spending Account (FSA) for dependent and health care expenses.
• 11 standard holidays and 3 weeks of annual leave.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level