Target Digital Network Analyst (TDNA)

Lentech Inc. • Linthicum, MD

4d

About The Position

The Target Digital Network Analyst (TDNA) conducts advanced analysis of signals intelligence (SIGINT) collection, pen source data, network data, and host data to maintain target continuity, profile targets and their activities, and develop techniques for gaining additional target information. The analyst provides expert support at the network and host levels to identify and characterize anomalies on U.S. Government networks, applying knowledge of target technologies, digital networks, and the applications running on them to determine how targets communicate, move, operate, and live.

The position applies analytic and geospatial techniques to communications content, network packet information, operating-system and executable-file data, host data, and metadata. This work supports anomaly identification, target location and tracking, and accurate intelligence reporting. The analyst uses knowledge of network-based adversary tactics, techniques, and procedures, network protocols, and common cyber vulnerabilities.

The role combines expert research with intelligence-community assessments and reports and open-source intelligence to support vulnerability discovery and mitigation for U.S. National Defense platforms and Critical Infrastructure. Duties also include writing intelligence reports, briefing and informing senior leadership, and traveling to cyber tabletop exercises (CTTXs).

Requirements

• Hold an active and current TS.SCI with FSP through MD.
• Have a CI polygraph completed within the last six years.
• Have at least five years of experience in two or more of these areas: Computer Network Exploitation, Computer Network Attack, vulnerability assessment, penetration testing, incident response, network and/or host forensics, cryptanalytic work in a military or intelligence-community organization, or cryptology work in a military or intelligence-community organization.
• Experience analyzing DNI and DNR information for intelligence reporting.
• Proficiency in sustained target analysis and use of advanced analytic techniques.
• Ability to build and maintain target profiles and relevant databases for targeting, tasking, and analysis.
• Strong skills evaluating intelligence to identify gaps and tailor collection efforts.
• Familiarity with open-source data and collection analysis.
• Knowledge of relevant databases and tools for targeting and analysis.
• Have at least three years of experience in three or more of the following areas: analysis of host data at rest, including Microsoft Windows operating systems, system internals, and file attributes; executable-file analysis, particularly PE files and dynamically linked libraries; file hashing and fuzzy file hashing (e.g., ssdeep, fciv, and md5deep); forensic analysis of Windows or Linux systems and/or mobile devices; commercial, open-source, or GOTS intrusion-detection tools (e.g., Snort, BroIDS); packet capture and evaluation (e.g., tcpdump, ethereal/wireshark, NOSEHAIR); network mapping and discovery (e.g., nmap, TRICKLER); industry-standard system/network tools (e.g., netcat, netstat, traceroute, rpcinfo, nbtscan, snmpwalk, Sysinternals suite); exploit development for Microsoft Windows, Linux, or personal-computer/mobile-device operating systems; software reverse engineering using code disassemblers (e.g., IDA Pro) and debugging unknown code (e.g., Ollydbg); analysis of code in memory, including RAM snapshots and Windows crash dump or Linux kernel dump files; or SID(S2)/NTOC analysis and production involving cyber adversary intrusion sets/targets, foreign network intelligence analysis, or identification and extraction of digitally transported information.

Nice To Haves

• A bachelor’s degree in a STEM field is preferred.

Responsibilities

• Analyze SIGINT collection, pen source data, network data, and host data to ensure target continuity, profile targets and their activities, and develop techniques to obtain additional target information.
• Provide expert network- and host-level analytic support to identify and characterize anomalies on U.S. Government networks.
• Apply knowledge of target technologies, digital networks, and applications to assess how targets communicate, move, operate, and live.
• Review relevant content carried in target communications using analytic techniques.
• Apply geospatial analysis to network packet information, operating-system data, executable-file data, host data, and communications-system metadata to identify anomalies and locate and track targets.
• Accurately report intelligence gained through analysis and characterize anomalies on U.S. Government networks.
• Combine research, intelligence-community assessments and reports, and open-source intelligence to support vulnerability discovery and mitigation for U.S. National Defense platforms and Critical Infrastructure.
• Write intelligence reports and brief and inform senior leadership.
• Travel to cyber tabletop exercises (CTTXs).

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level