Network Forensics Cybersecurity Analyst

BCMC • Arlington, VA

1d

About The Position

BCMC is seeking Network Forensics Cybersecurity Analysts to support the DHS Hunt and Incident Response Team (HIRT) mission. HIRT provides front-line response to cyber incidents and proactively hunts for malicious cyber activity. The role supports on- and offsite incident response for government agencies and critical infrastructure owners affected by cyberattacks, providing advanced technical assistance, proactive hunting, rapid onsite response, and immediate investigation through host- and network-based cybersecurity analysis. Analysts investigate breaches to characterize their severity and develop mitigation and remediation plans.

Requirements

• U.S. citizenship.
• Active TS/SCI clearance.
• Ability to obtain DHS Suitability.
• At least 2 years of directly relevant experience in network investigations.
• In-depth knowledge of Computer Network Defense policies, procedures, and regulations.
• In-depth knowledge of TCP/IP and standard protocols, including ICMP, HTTP/S, DNS, SSH, SMTP, SMB, and NFS.
• In-depth knowledge and experience with Wi-Fi networking and network topologies, including DMZs and WANs.
• Substantial knowledge of Splunk or other SIEMs.
• Understanding of MITRE ATT&CK.
• Knowledge of defense-in-depth principles and general attack stages related to network security architecture.
• Ability to characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.
• Ability to identify and analyze anomalies in network traffic using metadata.
• Experience reconstructing malicious attacks or activity based on network traffic.
• Experience examining network topologies to understand data flows through a network.
• Ability to work collaboratively across physical locations.
• Bachelor’s degree in Computer Science, Cyber Security, Computer Engineering, or a related field; alternatively, a high school diploma and 4–6 years of network investigations experience.

Nice To Haves

• Substantial knowledge of network device integrity concepts and methodologies.
• Proficiency with network analysis software such as Wireshark.
• Proficiency with carving and extracting information from PCAP data.
• Proficiency with non-traditional network traffic, such as Command and Control.
• Proficiency with preserving evidence integrity according to standard operating procedures or national standards.
• Proficiency with designing cybersecurity systems and environments in Linux and/or Windows.
• Proficiency with virtualized environments.
• DoD 8140.01 IAT Level II, IASAE II, or CSSP Analyst certification.
• DoD 8140.01 GCIA, GCIH, CSSP Analyst, or CSSP Incident Responder certification.
• DoD 8140.01 CEH or CSSP Analyst certification.
• SANS GIAC GNFA certification preferred.

Responsibilities

• Assist the Government lead in coordinating teams during preliminary incident response investigations.
• Assist the Government lead with customer interfacing while onsite.
• Determine appropriate courses of action in response to identified and analyzed anomalous network activity.
• Assess network topology and device configurations, identify critical security concerns, and provide security best-practice recommendations.
• Assist with writing and publishing Computer Network Defense guidance and reports on incident findings for appropriate constituencies.
• Collect network intrusion artifacts, such as PCAP data, domains, URIs, and certificates, and use discovered data to enable mitigation of potential Computer Network Defense incidents.
• Analyze identified malicious network activity to determine exploited weaknesses, exploitation methods, and effects on systems and information.
• Collect network device integrity data and analyze it for signs of tampering or compromise.
• Assist with real-time Computer Network Defense incident handling for onsite engagements, including forensic collections, intrusion correlation and tracking, threat analysis, and advising on system remediation.

Benefits

• Extremely competitive salary.
• Employer pays 95% of employee medical, dental, and vision coverage.
• Employer pays 100% of employee life, short-term disability, and long-term disability coverage.
• 401(k) with company match.
• Flexible Spending Account for dependent and health care.
• 11 standard holidays and 3 weeks of annual leave.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level