NOSC Analyst

BAE Systems•Sterling, VA

1d•$97,008 - $164,914

About The Position

BAE Systems is seeking a Network Operations and Security Analyst to serve as a Tier III analyst in a Network Operations and Security Center (NOSC). The program provides cloud and on-premises services across multiple classification levels and remote locations. The role actively enforces continuous verification across the seven Department of Defense Zero Trust pillars in a hybrid architecture. The analyst conducts continuous monitoring, incident response, threat hunting, vulnerability assessment coordination, and enterprise artifact collection. The position monitors network infrastructure, servers, and security systems; evaluates network structures and device configurations for security risks; analyzes cloud and on-premises traffic and system logs; and works to improve Security Operations Center (SOC) and Network Operations Center (NOC) response and efficiency. The analyst also correlates endpoint, network, identity, and cloud telemetry using enterprise SIEM/SOAR platforms, applies threat intelligence and frameworks such as MITRE ATT&CK, and assists program management staff with prioritization and milestone tracking for SOC/NOC operations and maturity governance.

Requirements

Bachelor's degree in computer science, information systems, or another technology-related field.
At least 5 years of experience in security operations, demonstrating leadership in customer-facing roles.
CASP+, Certified Ethical Hacker (CEH), GIAC Certified Incident Handler (GCIH), or relevant DoDM 8140.03 AIM/AIT III-qualified certification.
Familiarity with the NIST SP 800-207 Zero Trust Architecture framework.
Proficiency in analyzing cyber-attacks, including understanding attack classifications and stages, system and application vulnerabilities, and compliance with DoD policies and procedures.
Strong understanding of network topologies and protocols, including TCP/IP, ICMP, HTTP/S, DNS, SSH, SMTP, and SMB.
Experience with AWS, Cisco, Splunk SIEM, Splunk Forwarders, IDS/IPS, VMware, SSL decryption, proxy and DLP operations, and Windows- and Linux-based endpoints.
Understanding of threat intelligence integration throughout the enterprise at multiple layers.

Responsibilities

Conduct continuous monitoring, incident response, and threat hunting activities.
Coordinate vulnerability assessments and artifact collection across the enterprise.
Monitor network infrastructure, servers, and security systems using SIEM, NMS, and endpoint detection tools.
Evaluate network structures and device configurations for security risks and recommend security best practices.
Gather data to identify and respond to network intrusions.
Identify, categorize, and prioritize network outages, performance degradation, and potential security breaches.
Analyze cloud and on-premises network traffic and system logs to identify error conditions, malicious activities, exploited vulnerabilities, and methods used.
Develop processes to enhance SOC and NOC response and efficiency.
Correlate endpoint, network, identity, and cloud telemetry using enterprise SIEM/SOAR platforms.
Use threat intelligence feeds and frameworks such as MITRE ATT&CK to uncover hidden or persistent network anomalies.
Assist Program Management staff with prioritization and milestone tracking for SOC and NOC Operations and Maturity governance.