Target Digital Network Analyst (TDNA)

Gormat•Annapolis Junction, MD

About The Position

This projected vacancy is expected to become available in October 2026. The Target Digital Network Analyst (TDNA) supports a team of Target Analyst Reporters and Target Digital Network Analysts focused on improving, protecting, and defending national security. The role combines expert research, intelligence community assessments and reports, and open-source intelligence to support vulnerability discovery and mitigation for U.S. National Defense platforms and critical infrastructure. Work includes writing intelligence reports, briefing senior leadership, and traveling to cyber tabletop exercises (CTTXs). The TDNA conducts advanced analysis of SIGINT collection, DNI and DNR data, open-source information, network data, and host data to maintain target continuity, profile targets and their activities, develop techniques to gain additional target information, and identify collection opportunities. The analyst provides expert network- and host-level support to identify and characterize anomalies on U.S. Government networks, applies knowledge of target technologies and digital networks to assess how targets communicate and operate, and uses analytic and geospatial techniques on communications content, packet information, operating-system data, executable files, host data, and metadata. The role also involves reporting intelligence findings, maintaining databases for targeting, tasking, and analysis, researching designated target sets using open and classified sources, identifying intelligence gaps, and tailoring or enabling collection to address those gaps. A TS/SCI clearance with polygraph is required.

Requirements

Experience analyzing DNI and DNR information for intelligence reporting.
Proficiency in sustained target analysis and advanced analytic techniques.
Ability to build and maintain target profiles and relevant databases for targeting, tasking, and analysis.
Ability to evaluate intelligence, identify gaps, and tailor collection efforts.
Familiarity with open-source data and collection analysis.
Knowledge of databases and tools used for targeting and analysis.
At least five years of experience in two or more of the following areas: computer network exploitation; computer network attack; vulnerability assessment; penetration testing; incident response; network and/or host forensics; cryptanalytic work in a military or intelligence community organization; or cryptology work in a military or intelligence community organization. Four years of relevant experience may be substituted for a bachelor's degree in a STEM field.
At least three years of experience in three or more of the following areas: analysis of host data at rest, including Microsoft Windows operating systems, system internals, and file attributes; executable-file analysis, particularly PE files and dynamic linked libraries; file hashing and fuzzy file hashing; forensic analysis of Windows systems, Linux systems, and/or mobile devices; use of commercial, open-source, or GOTS intrusion-detection tools; packet capture and evaluation; network mapping and discovery; industry-standard system and network tools; exploit development for Windows, Linux, personal computer, or mobile-device operating systems; software reverse engineering using code disassemblers and debugging unknown code; analysis of code in memory, RAM snapshots, crash dumps, or Linux kernel dumps; or SID(S2)/NTOC analysis and production involving cyber adversary intrusion sets or targets, foreign network intelligence analysis, or identification and extraction of digitally transported information.
TS/SCI clearance with polygraph required.

Nice To Haves

Bachelor's degree in a STEM field preferred.

Responsibilities

Analyze SIGINT collection, DNI and DNR information, open-source data, network data, and host data to maintain target continuity and profile targets and their activities.
Develop techniques to gain additional information about targets and identify opportunities for follow-on collection.
Provide expert network- and host-level analytic support to identify and characterize anomalies on U.S. Government networks.
Apply knowledge of target technologies, digital networks, and applications to determine how targets communicate and operate.
Analyze communications content and apply geospatial techniques to packet information, operating-system data, executable files, host data, and metadata.
Accurately report intelligence gained from analysis, including writing intelligence reports and briefing senior leadership.
Maintain databases for targeting, tasking, and analysis.
Conduct sustained target analysis and enhancement using DNI and DNR analytic techniques.
Research open and classified sources to develop comprehensive baseline profiles of designated target sets.
Identify intelligence gaps, evaluate gathered intelligence, and tailor or enable collection to close gaps.
Travel to cyber tabletop exercises (CTTXs).