NOSC Cyber Analyst Junior

Peraton•Arlington, VA

7d•$66,000 - $106,000•Onsite

About The Position

Peraton is seeking a NOSC Cyber Analyst Junior to support our customer onsite in Arlington, Va. Responsibilities include: Coordinate across the enterprise to ensure network security devices are being monitored and are receiving or generating alerts. Identify security risks and exposures, determine causes of security violations, and suggest procedures to halt future incidents and improve security. Perform network traffic analysis utilizing raw packet data, net flow, IDS, IPS and custom sensor output, as it pertains to the cyber security of communications networks. Device monitoring of Tiered alerts for all operational networks. Maintain documentation for processes and procedures. Create incident reports providing both high level and in-depth details for investigations.

Requirements

Requires a Top Secret clearance with SCI eligibility
Current DoD 8570 IAT Level II certification (CCNA Security, CySA+, CICSP, GSEC, Security+ CE, SSCP)
Current DoD 8570 CSSP-Analyst certification. (CEH, CFR, CySA+, GCIA, GCIH, GICSP, SCYBER)
Requires a BS and 2 years of experience; will consider 4 additional years relevant experience in lieu of BS degree.
Requires minimum 2 years’ experience in Incident Handling/Incident Response
Fundamental experience working with DoD / Government Leaders at all levels
Fundamental experience working CND duties (e.g., Protect, Defend, Respond, and Sustain).
Fundamental computing system knowledge, particularly networking, including a knowledge of communication protocols and familiarity with common computing security elements such as IDS/IPS systems and firewalls.
Knowledge of hacker tactics, techniques and procedures (TTP).
Familiarity with computing security frameworks such as MITRE ATT&CK and Cyber Kill Chain.
Fundamental experience monitoring intrusion detection and computer defense appliances (Splunk, Elastic), applications, and analysis of associated alerts.
Fundamental knowledge of advanced threat actor tactics, techniques, and procedures (TTP)
Fundamental knowledge of software exploits
Fundamental experience in analyzing packed and obfuscated code.
Fundamental experience evaluating packet captures.
Fundamental technical writing skills
Fundamental communication skills
Ability to support the team with investigations

Responsibilities

Coordinate across the enterprise to ensure network security devices are being monitored and are receiving or generating alerts.
Identify security risks and exposures, determine causes of security violations, and suggest procedures to halt future incidents and improve security.
Perform network traffic analysis utilizing raw packet data, net flow, IDS, IPS and custom sensor output, as it pertains to the cyber security of communications networks.
Device monitoring of Tiered alerts for all operational networks.
Maintain documentation for processes and procedures.
Create incident reports providing both high level and in-depth details for investigations.