Target Network Analyst

Aermor•Suffolk, VA

1d•Onsite

About The Position

AERMOR is seeking a Target Network Analyst (SME IV) to join our team in Suffolk, VA. The ideal candidate will possess strong Windows Administration skills, exploit development, reverse engineering, red team capabilities and engineering experience. Responsibilities: Provide Scientific analysis of electronic evidence of compromised systems to establish vulnerability exploits. Travel/deployment in response to compromised systems. Provide consultative, technical research and analytical support on information security trends, standards, concepts and solutions. Test and evaluation of new commercial and/or government developed network-based investigative tools. Provides network-engineering solutions of state-of-the-art technologies by conducting reverse engineering of new vulnerabilities and malicious code in order to build counterattack signatures against known and unknown threats. Perform in-depth forensic analysis of compromised systems to include identification of malicious code, methods of compromise and data extraction techniques. Tracks trends and performs network nodal analysis on the Navy infrastructure to determine security gaps and network configuration deficiencies. Correlate technical and trend analysis for distribution to CND community. Primary liaison with national level intelligence collection in support of Tier II CND intelligence requirements. Provide I&W, AS&W and CND measures using intelligence analysis to implement CND defense options for response to immediate hostile threats. Provide real-time response to network compromises; may need to work flexible schedule based on crisis operations or flyaway watch team. Research various open-source hacker techniques and vulnerability exploit forums. Provides consolidated executive summaries and detailed analysis technical briefings for tactical commanders. Perform in-depth analysis of compromised systems to include identification of malicious code, methods of compromise and data extraction techniques. Provide and maintain offsite storage of tape backups.

Requirements

7 - 10 years of experience as a Windows system administrator.
5+ years’ experience in exploit development, reverse engineering, red team capabilities and engineering are required.
Experience utilizing and administering Linux-based operating systems.
Experience with researching various cyber actors’ TTPs, organizational structures, capabilities, personas, and environments, and integrate findings into penetration tests or web risk assessment operations.
Web Server configuration knowledge: Microsoft IIS, Apache HTTP Server, Apache Tomcat.
Experience with executing technical cyber assessments or penetration tests.
Experience with the utilization of testing methodology for cloud-based and networked systems.
Experience with modification, testing and utilization of computer network attack and exploitation tools.
Experience with Operational Risk Management (ORM) concepts and application.
Software installation, upgrades, patches, and configuration support ensuring IA/C&A compliance.
DNS and DHCP configuration, support and maintenance.
Group Policy configuration, support, and maintenance.
Active Directory configuration, support, and maintenance.
Proficient in the application of Secure Technical Implementation Guides (STIGs).
Configuration and administration support for CTE network accounts.
Subject matter expertise in the deployment and implementation of operating systems and application software.
Excellent oral and written communications skills.
Able to work alone or in a small group to resolve tasks independently with minimal supervision.

Nice To Haves

CCNA Certification is preferred but not required.
Ability to implement software, Cyber assessment tools, information assurance products, or computer security applications (preferred).
Experience with computer network or system design and implementation (preferred).

Responsibilities

Provide Scientific analysis of electronic evidence of compromised systems to establish vulnerability exploits.
Travel/deployment in response to compromised systems.
Provide consultative, technical research and analytical support on information security trends, standards, concepts and solutions.
Test and evaluation of new commercial and/or government developed network-based investigative tools.
Provides network-engineering solutions of state-of-the-art technologies by conducting reverse engineering of new vulnerabilities and malicious code in order to build counterattack signatures against known and unknown threats.
Perform in-depth forensic analysis of compromised systems to include identification of malicious code, methods of compromise and data extraction techniques.
Tracks trends and performs network nodal analysis on the Navy infrastructure to determine security gaps and network configuration deficiencies.
Correlate technical and trend analysis for distribution to CND community.
Primary liaison with national level intelligence collection in support of Tier II CND intelligence requirements.
Provide I&W, AS&W and CND measures using intelligence analysis to implement CND defense options for response to immediate hostile threats.
Provide real-time response to network compromises; may need to work flexible schedule based on crisis operations or flyaway watch team.
Research various open-source hacker techniques and vulnerability exploit forums.
Provides consolidated executive summaries and detailed analysis technical briefings for tactical commanders.
Perform in-depth analysis of compromised systems to include identification of malicious code, methods of compromise and data extraction techniques.
Provide and maintain offsite storage of tape backups.
Correlate technical and trend analysis for distribution to CND community.