Network Based Systems Analyst - IV SME

Base One Technologies - Arlington, VA

Full-time - Senior

Arlington, VA

Professional, Scientific, and Technical Services

About the position

The Network Based Systems Analyst - IV - SME role at Base One Technologies involves monitoring and analyzing network activity to detect suspicious behavior and potential threats. The position requires a senior-level professional with extensive experience in cyber defense analysis, utilizing advanced technologies and tools to protect information systems and networks.

Responsibilities

• Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources
• Coordinate with enterprise-wide cyber defense staff to validate network alerts
• Document and escalate incidents that may cause ongoing and immediate impact to the environment
• Perform cyber defense trend analysis and reporting
• Perform event correlation using information gathered from various sources to gain situational awareness
• Provide daily summary reports of network events and activity relevant to cyber defense practices
• Receive and analyze network alerts and determine possible causes
• Provide timely detection, identification, and alerting of possible attacks/intrusions
• Use cyber defense tools for continual monitoring and analysis of system activity
• Analyze identified malicious activity to determine weaknesses exploited
• Identify and analyze anomalies in network traffic using metadata
• Validate intrusion detection system (IDS) alerts against network traffic
• Identify applications and operating systems of a network device based on network traffic
• Reconstruct a malicious attack or activity based on network traffic
• Identify network mapping and operating system fingerprinting activities
• Assist in the construction of signatures for cyber defense network tools

Requirements

• U.S. Citizenship with active Secret clearance
• Ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) Suitability and TS/SCI clearance
• 8+ years of direct relevant experience in cyber defense analysis
• Experience with developing and deploying signatures
• Experience detecting host and network-based intrusions via intrusion detection technologies
• Experience implementing incident handling methodologies
• Experience implementing protocol analyzers
• Experience collecting data from various cyber defense resources
• Ability to read and interpret signatures
• Experience performing packet-level analysis
• Experience conducting trend analysis

Nice-to-haves

• Python programming experience
• Strong math and science background
• Experience with Carnegie Mellon SiLK tool suite