Network Defense Analyst

Network Defense Analyst

DESE Research, Inc. seeks a Network Defense Analyst to join an exciting and growing team focused on the cybersecurity analysis, protection, and defense of critical Department of Defense (DoD) networks and infrastructure.

The candidate will join a team of analysts to provide monitoring and analysis of DoD networks to maintain defense and safeguarding of protected data and access. The candidate will additionally perform network flow analysis as well as deep packet inspection to identify vulnerabilities, traffic anomalies, or concerns related to abnormal activity on protected networks. The team will leverage network monitoring tools to process alerts related to vulnerabilities and compile reports based on findings for DoD stakeholders.

The candidate will also provide assistance to sites for the assurance of cybersecurity policy compliance and readiness of network infrastructure including firewalls, routers, switches, as well as cloud-hosted services.

Bachelor's Degree in Cybersecurity, Computer Information Systems, or similar field of study

Applicants must at least possess an existing Secret security clearance.

• Analyzes network data using packet capture analysis, network flow analysis, as well as Cloud Logs to identify and report on potential security incidents
• Assists customers with remediation of a wide range of cybersecurity issues including vulnerabilities, misconfigurations, cyber incidents, and non-compliance
• Is familiar with encryption technologies, penetration and vulnerability analysis of various security technologies, and information technology security research
• Provides analysis, recommendations, and verification to achieve acceptable mitigation of security incidents
• Generates and publishes monthly reports providing customers with a summary of their cyber security posture and provides assistance for customers with consistent issues
• Conducts daily review of open vulnerabilities using both Network and Endpoint based security solutions, reporting on high risk findings and tracking mitigation efforts until resolved
• Enforces endpoint quarantine policies on extremely high risk devices using Endpoint Security Solution
• Assists customers in preparing for upcoming cyber security posture assessments by providing overview of topics covered by assessment, and coordinates with customer and other operational teams to mitigate potential high risk findings observed on the site's network
• May require interfacing with external entities (e.g. law enforcement, intelligence/government agencies, etc.)
• One of the following active certifications (or ability to obtain within two months of hire):

• Bachelor's degree or higher in a related field
• Minimum of 1-4 years of related experience
• Active CompTIA Security+CE certification with the ability to obtain one of the following certifications within two months of hire:
• CEH, CFR, CCNA Cyber Ops, CCNA-Security, CySA+, GCIA, GCIH, GICSP, Cloud+, SCYBER, Pen Test+
• Strong written and verbal communication skills
• Ability to communicate and present information to customers at varying levels of technical detail
• Comfortable working in a constantly adapting and changing environment that may require learning new skills and the ability to adjust priorities
• Basic knowledge of Computer Network Defense activities to include standard cyber-defense Intrusion Detection Systems (IDS), Intrusion Protection Systems (IPS), network monitoring, packet capture analysis, network flow analysis, network proxy operation, firewalls, and anti-virus capabilities
• Basic knowledge of vulnerability and risk management techniques in a cyber security setting, including handling risk/severity-based prioritization and decision making

• Experience analyzing alerts using PCAPs and/or cloud logs, as well as an understanding of network threats, potential network exploitation, and methods to defend against potential malicious activity
• Proficiency in Office 365 tools at a professional level
• Experience using vulnerability scanning solutions such as…