Network Defense Analyst

DESE Research, Inc.•Huntsville, AL

About The Position

DESE Research, Inc. seeks a Network Defense Analyst to join an exciting and growing team focused on the cybersecurity analysis, protection, and defense of critical Department of Defense (DoD) networks and infrastructure. The candidate will join a team of analysts to provide monitoring and analysis of DoD networks to maintain defense and safeguarding of protected data and access. The candidate will additionally perform network flow analysis as well as deep packet inspection to identify vulnerabilities, traffic anomalies, or concerns related to abnormal activity on protected networks. The team will leverage network monitoring tools to process alerts related to vulnerabilities and compile reports based on findings for DoD stakeholders. The candidate will also provide assistance to sites for the assurance of cybersecurity policy compliance and readiness of network infrastructure including firewalls, routers, switches, as well as cloud-hosted services.

Requirements

Bachelor's Degree in Cybersecurity, Computer Information Systems, or similar field of study
Existing Secret security clearance
Bachelor's degree or higher in a related field
Minimum of 1-4 years of related experience
Active CompTIA Security+CE certification with the ability to obtain one of the following certifications within two months of hire: CEH, CFR, CCNA Cyber Ops, CCNA-Security, CySA+, GCIA, GCIH, GICSP, Cloud+, SCYBER, PenTest+
Strong written and verbal communication skills
Ability to communicate and present information to customers at varying levels of technical detail
Comfortable working in a constantly adapting and changing environment that may require learning new skills and the ability to adjust priorities
Basic knowledge of Computer Network Defense activities to include standard cyber-defense Intrusion Detection Systems (IDS), Intrusion Protection Systems (IPS), network monitoring, packet capture analysis, network flow analysis, network proxy operation, firewalls, and anti-virus capabilities
Basic knowledge of vulnerability and risk management techniques in a cyber security setting, including handling risk/severity-based prioritization and decision making

Nice To Haves

Experience analyzing alerts using PCAPs and/or cloud logs, as well as an understanding of network threats, potential network exploitation, and methods to defend against potential malicious activity
Proficiency in Office 365 tools at a professional level
Experience using vulnerability scanning solutions such as Tenable Nessus
Experience using data presentation/automation tools such as PowerBI or Tableau
Experience assessing Security Technical Implementation Guide (STIG) findings
Experience working with Endpoint Security Solutions such as Trellix or Microsoft Defender Endpoint
Experience handling risk/severity-based prioritization and decision making
CySA+ or CEH certification
Top Secret Clearance

Responsibilities

Analyzes network data using packet capture analysis, network flow analysis, as well as Cloud Logs to identify and report on potential security incidents
Assists customers with remediation of a wide range of cybersecurity issues including vulnerabilities, misconfigurations, cyber incidents, and non-compliance
Provides analysis, recommendations, and verification to achieve acceptable mitigation of security incidents
Generates and publishes monthly reports providing customers with a summary of their cyber security posture and provides assistance for customers with consistent issues
Conducts daily review of open vulnerabilities using both Network and Endpoint based security solutions, reporting on high risk findings and tracking mitigation efforts until resolved
Enforces endpoint quarantine policies on extremely high risk devices using Endpoint Security Solution
Assists customers in preparing for upcoming cyber security posture assessments by providing overview of topics covered by assessment, and coordinates with customer and other operational teams to mitigate potential high risk findings observed on the site's network
May require interfacing with external entities (e.g. law enforcement, intelligence/government agencies, etc.)