4115 Computer Network Defense Lead

OVERVIEW :

We are seeking a highly motivated and experienced Computer Network Defense (CND) Lead to be responsible for the overall technical security defense and monitoring of our environment. The CND Lead will play a critical role in safeguarding our digital assets by proactively identifying, analyzing, and responding to security threats. This position requires a strong understanding of network security principles, security monitoring tools, and incident response methodologies. The ideal candidate will be a proactive problem-solver with excellent communication and leadership skills.

GENERAL DUTIES:

• Assume overall responsibility for the technical security defense and monitoring of the organization's IT environment.
• Monitor and respond to security alerts generated by the Host Based Security System (HBSS).
• Administer and maintain security Intrusion Prevention System (IPS) and Intrusion Detection System (IDS) tools.
• Analyze triggers and events generated by Security Information and Event Management (SIEM) systems to identify potential security incidents.
• Lead and participate in incident response activities, including containment, eradication, and recovery efforts.
• Develop and maintain documentation related to security monitoring processes and incident response procedures.
• Collaborate with other IT teams to implement and maintain security best practices.
• Stay up-to-date on the latest security threats, vulnerabilities, and industry trends.

REQUIRED QUALIFICATIONS:

• 5-8 years of demonstrable experience in computer network defense, security operations, or a related field.
• Must possess and maintain a Department of Defense (DoD) 8570 Information Assurance Technical (IAT) Level III certification.
• Proven experience in monitoring and responding to alerts from Host Based Security Systems (HBSS).
• Hands-on experience administering and managing security IPS/IDS tools.
• Strong analytical skills with the ability to interpret and respond to events from SIEM systems.
• Experience participating in and leading incident response efforts.
• Solid understanding of networking protocols and security concepts.
• Excellent problem-solving and troubleshooting skills.
• Strong written and verbal communication skills.
• Ability to work independently and as part of a team.

CLEARANCE:

• TS/SCI minimum with willingness to sit for a CI Polygraph