Target Digital Network Analyst (TDNA)

Gormat•Annapolis Junction, MD

About The Position

This projected vacancy is expected to become available in October 2026. The Target Digital Network Analyst supports a mission focused on improving, protecting, and defending national security. The role combines expert research, intelligence community assessments and reports, and open-source intelligence to support vulnerability discovery and mitigation efforts involving U.S. National Defense platforms and Critical Infrastructure. The analyst produces intelligence reports, briefs and informs senior leadership, and travels to cyber tabletop exercises (CTTXs). The role conducts advanced analysis of SIGINT collection, open-source data, network data, host data, DNI, and DNR to maintain target continuity, profile targets and their activities, and develop techniques to obtain additional target information. It provides network- and host-level analytic support to identify and characterize anomalies on U.S. Government networks. The analyst applies knowledge of target technologies, digital networks, and applications to understand how targets communicate, move, operate, and live; reviews content carried in target communications; and applies geospatial analysis to network packet, operating system, executable file, host, and metadata. The work also includes maintaining targeting, tasking, and analysis databases; identifying access-development opportunities and intelligence gaps; and tailoring or enabling collection to address those gaps.

Requirements

Experience analyzing DNI and DNR information for intelligence reporting.
Proficiency in sustained target analysis and advanced analytic techniques.
Ability to build and maintain target profiles and databases for targeting, tasking, and analysis.
Strong ability to evaluate intelligence, identify gaps, and tailor collection efforts.
Familiarity with open-source data and collection analysis.
Knowledge of relevant databases and tools for targeting and analysis.
At least five years of experience in two or more of the following areas: Computer Network Exploitation, Computer Network Attack, vulnerability assessment, penetration testing, incident response, network and/or host forensics, cryptanalytic work in a military or intelligence community organization, or cryptology work in a military or intelligence community organization. Four years of relevant experience may be substituted, though the description does not specify what requirement this substitution applies to.
At least three years of experience in three or more of the following areas: analysis of host data at rest, including Microsoft Windows operating systems, system internals, and file attributes; executable file analysis, particularly PE files and dynamic linked libraries; file hashing and fuzzy file hashing; forensic analysis of Windows, Linux, and/or mobile devices; commercial, open-source, or GOTS intrusion-detection tools; packet capture and evaluation; network mapping and discovery; industry-standard system and network tools; exploit development for Microsoft Windows, Linux, or personal computer/mobile device operating systems; software reverse engineering using code disassemblers and debugging unknown code; analysis of code in memory, including RAM snapshots and Windows or Linux dumps; or SID(S2)/NTOC analysis and production involving cyber adversary intrusion sets/targets, foreign network intelligence analysis, or identification and extraction of digitally transported information.
TS/SCI with polygraph is required.

Nice To Haves

Bachelor's degree in a STEM field preferred.

Responsibilities

Conduct advanced analysis of SIGINT collection, open-source data, network data, host data, DNI, and DNR to ensure target continuity, profile targets and activities, and develop techniques to gain additional target information.
Provide expert network- and host-level analytic support to identify and characterize anomalies on U.S. Government networks.
Apply knowledge of target technologies, digital networks, and applications to determine how targets communicate, move, operate, and live.
Review relevant content carried in target communications using analytic techniques.
Apply geospatial analysis to network packet information, operating system data, executable file data, host data, and metadata from tasked communications systems to identify anomalies and locate and track targets.
Accurately report intelligence gained from analysis and characterize anomalies on U.S. Government networks.
Analyze DNI data for reportable intelligence and build target profiles.
Maintain appropriate databases for targeting, tasking, and analysis.
Perform sustained target analysis and enhancement using DNI and DNR analytic techniques.
Analyze DNI data to identify new access-development opportunities for follow-on collection requirements.
Research open-source and classified sources to develop comprehensive baseline profiles of designated target sets.
Identify intelligence gaps and evaluate gathered intelligence to tailor current collection or enable new collection to close gaps.
Write intelligence reports, brief and inform senior leadership, and travel to cyber tabletop exercises (CTTXs).