Intrusion Analyst, Level 3

Independent Software•Annapolis Junction, MD

About The Position

As an Intrusion Analyst Level 3 with Independent Software, you will analyze digital network activity to identify and assess potential malicious or unauthorized behavior. You will review network and system data to detect anomalies, evaluate suspicious activity, and document findings in support of mission operations. You will help categorize network activity, document relevant tactics and behaviors, and contribute to recommended mitigation or defensive actions. This role may involve analysis of both network-based and host-based activity, depending on mission needs. Your work will support mission teams by helping identify potential threats, improving situational awareness, and contributing to the protection of critical systems and data.

Requirements

Experience performing intrusion analysis, cyber threat analysis, or malware analysis
Experience analyzing network traffic, system logs, or digital activity to identify potential threats
Familiarity with intrusion detection, incident analysis, and cybersecurity monitoring practices
Understanding of common threat tactics, techniques, and procedures (TTPs)
Ability to analyze large datasets and identify patterns or anomalies related to security events
Programming or scripting experience in one or more of the following languages is preferred: C C# C C++ Java Perl Python
Bachelor’s degree plus 8 years of relevant experience, or Master’s degree plus 6 years of relevant experience, or Doctoral degree plus 4 years of relevant experience
An Associate’s degree plus 10 years of relevant experience may be considered for individuals with significant experience clearly related to the position.
(one or more required) CISSP CEH Security+ Network+ GIAC GREM CREA Certification
Must possess an active TS SCI with appropriate Polygraph to be considered for this role

Responsibilities

Analyze network and system data to identify suspicious or potentially malicious activity
Investigate anomalies and document findings related to potential security incidents
Categorize observed activity as benign, suspicious, or malicious based on analytical assessment
Document observed threat behaviors and associated tactics, techniques, and procedures (TTPs)
Assist in identifying potential vulnerabilities and recommend mitigation or defensive measures
Support both network-based and host-based intrusion analysis activities
Prepare analytical reports and documentation supporting mission requirements
Collaborate with mission teams to improve detection methods and analytical approaches
Maintain accurate records and analytical documentation in accordance with operational procedures