Computer Network Defense Analyst

Arlington, United States |

• Clearance Requirement Active Top Secret/SCI
• IAT/IAM Requirement DoD 8140 IAT Level II or III Certification

We are seeking an experienced Computer Network Defense Analyst to support cybersecurity monitoring, threat detection, incident analysis, and response within a secure Department of Defense (DoD) enterprise environment.

The ideal candidate will have hands-on experience with computer network defense, SIEM platforms, IDS/IPS, firewalls, and network traffic analysis. Responsibilities include investigating security threats, analyzing alerts, recommending mitigation strategies, ensuring security compliance, and supporting enterprise network defense operations.

The position requires 100% onsite work in Arlington, VA, with occasional travel as needed.

• Monitor enterprise networks, security tools, and applications to detect, correlate, and investigate suspicious or malicious activity.
• Analyze security alerts, IDS/IPS events, network traffic, and system logs to identify cybersecurity threats and vulnerabilities.
• Investigate security incidents, assess potential impact, and recommend appropriate response actions and mitigation strategies.
• Document security incidents, analysis, findings, and response recommendations in ticketing systems; perform routine security checks and maintain accurate operational documentation.
• Collaborate with infrastructure, network, storage, database, and application teams to strengthen security and support secure cloud migration initiatives.
• Assist senior analysts and management with threat forecasting, security trend analysis, and improvements to network defense processes and procedures.
• Maintain direct customer communication, independently resolve security concerns, and implement security configurations following vendor recommendations, DISA guidelines, and enterprise security standards.

• Bachelor's degree and 2+ years of experience in cybersecurity, computer network defense, or security operations; additional experience, education, or training may substitute for a degree.
• Strong knowledge of Windows, Red Hat Linux, AWS, Microsoft Azure, enterprise networking, TCP/IP, communication protocols, firewalls, and IDS/IPS.
• Experience monitoring security tools, analyzing network events, investigating threats, and recommending incident response and mitigation strategies.
• Experience implementing and maintaining application and hardware security configurations following vendor recommendations and DISA security best practices.
• Strong analytical, troubleshooting, technical documentation, and communication skills, with the ability to work independently and interact directly with customers.
• U.S. Citizenship, active DoD TS/SCI clearance at the start of employment, and willingness to undergo a CI Polygraph if required.
• Current DoD 8140 IAT Level II or III certification (e.g., Security+ CE or approved equivalent); ability to work 100% onsite in Arlington, VA, with occasional travel as required.

• Prior Computer Network Defense (CND) experience in large enterprise, DoD, IC, or DISA environments, including support for DISA mission partners, intrusion detection systems, network defense appliances, security alert analysis, and incident documentation in ticketing/case management systems.
• Experience with manual system log reviews, SIEM platforms (Splunk, Elastic), network log analysis, incident response recommendations, disaster recovery, business continuity, and security requirements for enterprise cloud migrations.

• Paid Time Off PTO):
  
  TEN (10) Paid days off & FIVE (5) Floating days off.
• Holidays: 11 Paid Holidays. Flex time can be utilized instead of…