Computer Network Defense Analyst - Rmantras

This position is 100% Onsite. This position is in Arlington, VA, with occasional/situational travel.

Certificate

DoDD 8140 IAT Level II (or Level III) certification (e.g., Security+ CE).

Location: Arlington, VA

Schedule 100% onsite

Clearance US Citizen with TS/SCI US Government Security Clearance to start

Responsibilities

Qualifications

• Perform computer network incident detection and response activities to detect, correlate, identify, and characterize anomalous activity indicative of threats to the CESO enterprise.
• Monitor security tools and applications for possible malicious activity, investigate associated alerts or indicators, and develop recommendations for a course of action, including mitigation strategies as required.
• Document each event and its associated analysis in a ticketing system with clear, accurate technical writing so it can be reviewed and acted on appropriately.
• Maintain regular face-to-face interaction with the customer; handle issues when they are raised by the customer with little or no supervision.
• Positively influence team performance by improving CESO processes and procedures.
• Ensure system checks are performed in a timely manner and that documentation is complete and accurate.
• Assist senior analysts and/or managers with forecasting and modeling current threats.
• Develop a strong rapport with the customer and serve as a trustworthy network defense analyst.
• Collaborate with infrastructure, storage, database, and application teams to align network defense monitoring with CESO’s operational requirements as the program transitions to its secure cloud environment.

Required Qualifications

• Bachelor’s degree and 2+ years of related experience; additional experience, education, or training may be considered in lieu of degree.
• Active TS/SCI security clearance required for this position.
• DoDD 8140 IAT Level II (or Level III) certification (e.g., Security+ CE).
• Strong computing systems knowledge with Windows, Red Hat, Cloud (AWS, Azure), and particularly networking, including communication protocols and familiarity with common security elements such as IDS/IPS systems and firewalls.
• Experience with implementing application/hardware security settings using vendor and DISA best business practices.
• Candidate may be asked to obtain a CI Polygraph in the future.

Preferred Qualifications

• Prior CND experience, ideally within a large enterprise or DoD/IC program environment.
• Experience monitoring intrusion detection and computer network defense appliances, applications, and analyzing associated alerts.
• Experience documenting analysis and providing response recommendations in a ticketing/case management system.
• Experience reviewing system logs manually and using automatic SIEMs tools (e.g., SPLUNK, Elastic) and performing network log analysis.
• Prior experience with DISA and DISA’s support to mission partners.
• An Understanding of disaster recovery and business continuity concepts as they apply to secure cloud migrations.