Cyber Network Defense Analyst Security Clearance

Position: Cyber Network Defense Analyst with Security Clearance
Location: Kiln

Top Skills' Details

* Must have current TS/SCI
* 1.) Relevant experience supporting a Security Operations Center
2.)

Experience with Security Incident and Event Management (SIEM)
3.) Network Traffic Analyzation
Secondary Skills - Nice to Haves
Secret clearance
Arcsight
Threat hunting
Malware analysis
Firewall
Network security
Mcafee

Job Description
Duties include network security monitoring and detection. Proactively searching for threats. Inspect traffic for anomalies and new malware patterns. Investigate and analyze logs. Provide analysis and response to alerts, and document activity in SOC investigations and Security Event Notifications (SENs). Primary Responsibilities Utilize a SIEM for enterprise monitoring and detection
Create Security Event Notifications to document investigation findings
Perform critical thinking and analysis to investigate cyber security alerts
Analyze network traffic using enterprise tools (e.g. Full PCAP, Firewall, Proxy logs, IDS logs, etc)
Collaborate with team members to analyze an alert or a threat
Stay up to date with latest threats
Monitor shared email box for notifications and requests
Utilize OSINT to aid in their investigation
Contribute to content tuning requests
Additional

Skills & Qualifications
All Junior Cyber Network Defense Analyst candidates shall have one (1) of the following education and experience levels:
Bachelor of Science (BS) degree in Information Technology, Cybersecurity, Data Science, Information Systems, or Computer Science AND a minimum of two (2) years professional experience.
Associates of Science (AS) degree AND a minimum of six (6) years professional experience.
High School Diploma or General Education Degree (GED) AND a minimum of eight (8) years of professional experience Professional experience requirement applies to relative areas listed below:
Network Administration
Unix/Linux Administration
Software engineering
Software development
Systems administration
Help desk/IT support Candidates should also demonstrate the following:
Familiarity with a SOC’s purpose and role within an organization
General understanding of common network ports and protocols (e.g. TCP/UDP, HTTP, ICMP, DNS, SMTP, etc)
Familiarity with network topologies and network security device functions (e.g. Firewall, IDS/IPS, Proxy, DNS, etc).
Familiarity with packet analysis tools such as Wireshark
Able to perform critical thinking and analysis to investigate cyber security alerts
Familiarity with common malware and attack vectors
Familiarity with Windows operating systems and standard OS logging
Familiarity with Antivirus, DLP, and host-based firewalls Must have at least one (1) of the following certifications:
CompTIA:
Security+, Pen Test+, Cloud+, CySA+
SANS GIAC: GFACT, GCED, GSEC, GCIA, GDSA, GICSP, GCFA, GISF
EC Council: CEH
CISCO: CBROPS
Cert Nexus: CFR
Federal IT Security Institute: FITSP-O

Preferred Qualifications
Familiar with SOC methodologies and processes
Familiarity with scripting languages (e.g. Python, Power Shell)