T1 Cyber Network Defense Analyst – Shift (w/ active TS)

Critical Solutions•Washington, DC

6d•$58,000 - $74,000•Hybrid

About The Position

Critical Solutions is hiring a Tier 1 Cyber Network Defense Analyst (CNDA) to support a federal customer in Washington, DC. The analyst will join a team providing security operations center (SOC) support, cyber analysis, application development, and 24x7x365 support. This is a hybrid role, with the expectation of working at the client site most days, and requires the ability to commute to Washington, DC. Candidates must be able to work non-core hours as necessary and be available for one of the listed day or night shift schedules. The selected candidate must possess an active DoD Top Secret clearance, be able to obtain and maintain Entry on Duty clearance, and pass the federal agency’s background investigation and fingerprinting requirements. U.S. citizenship is required. The role focuses on network security monitoring and detection, proactive threat searches, inspection of network traffic for anomalies and malware patterns, investigation and analysis of logs, and analysis and response to alerts. The analyst documents activity in SOC investigations and Security Event Notifications (SENs), collaborates with team members, uses OSINT to assist investigations, and contributes to content tuning requests. The listed salary range is $58,000–$74,000; compensation depends on factors including responsibilities, education, experience, knowledge, skills, certifications, and other requirements.

Requirements

Active TS/SCI clearance and ability to obtain and maintain Entry on Duty (EOD) clearance; the posting also specifies an active DoD Top Secret clearance.
Ability to work non-core hours if necessary and availability for one of the listed shift schedules.
Bachelor’s degree in Computer Science, Engineering, Information Technology, Cybersecurity, or a related field, and at least two years of professional experience in one or more of the following: network administration, Unix/Linux administration, software engineering, software development, systems administration, or help desk/IT support.
Familiarity with the purpose and role of a SOC within an organization.
General understanding of common network ports and protocols, such as TCP/UDP, HTTP, ICMP, DNS, and SMTP.
Familiarity with network topologies and network security device functions, such as firewalls, IDS/IPS, proxies, and DNS.
Familiarity with packet analysis tools such as Wireshark.
Ability to critically analyze and investigate cybersecurity alerts.
Familiarity with common malware and attack vectors.
Familiarity with Windows operating systems and standard OS logging.
Familiarity with antivirus, DLP, and host-based firewalls.
At least one of the following certifications: A+ CE, CCNA-Security, CND, Network+ CE, SSCP, Security+, or CySA+.
Must be a U.S. citizen and pass the required federal agency background investigation and fingerprinting.

Nice To Haves

Familiarity with SOC methodologies and processes.
Familiarity with scripting languages such as Python, PowerShell, JavaScript, or VBS.

Responsibilities

Use a SIEM for enterprise monitoring and detection.
Create Security Event Notifications to document investigation findings.
Apply critical thinking and analysis to investigate cybersecurity alerts.
Analyze network traffic using enterprise tools, including full PCAP, firewall, proxy, and IDS logs.
Collaborate with team members to analyze alerts and threats.
Stay up to date with the latest threats.
Monitor a shared email inbox for notifications and requests.
Use OSINT to support investigations.
Contribute to content tuning requests.
Monitor and detect network security threats, search proactively for threats, inspect traffic for anomalies and malware patterns, and investigate logs.
Analyze and respond to alerts, and document activity in SOC investigations.