Cyber Defense Analyst; 2nd Shift

Requires US Citizenship Yes
Employment Term and Type:
Regular, Full Time
Required Security Clearance: (Minimum for hire) TS/SCI
Required

Education:

(Minimum for hire) BA/BS in CS, IT, IA or related area of study desired; without a degree 8+ years relevant professional experience in those fields.
Salary Band: $91,085.69 to $

FGS, LLC is seeking a Cyber Defense Analyst (2nd Shift) to support the Navy’s cybersecurity environment at the Office of Naval Intelligence (ONI) Hopper Global Communications Center (HGCC) in Suitland, Maryland. The selected candidate will provide front-line cyber defense for critical TS/SCI networks by monitoring and investigating cybersecurity alerts, identifying potential threats, and supporting proactive threat-hunting activities.

The Cyber Defense Analyst will apply concentrated Computer Network Defense (CND) experience and knowledge of IT systems and networks to analyze security events, manage incident and event tickets, correlate activity across multiple cybersecurity platforms, support intelligence gathering and analysis, and communicate findings to Government and program stakeholders. This is a second-shift position with regular work hours of 1530–2330; occasional floater shifts or coverage outside these hours may be required based on program and staffing needs.

• Perform first-line monitoring and initial analysis of cybersecurity alerts affecting TS/SCI networks, including JWICS, ATLAS, and other networks supported by HGCC.
• Monitor SIEM, NIDPS, host-based security, endpoint, and related cybersecurity tools for alerts, anomalies, indicators of compromise, and suspicious activity.
• Investigate and perform initial technical analysis of cybersecurity alerts and events; document findings and elevate potential incidents to Tier 2 or other responsible personnel as appropriate.
• Create, update, track, and manage cybersecurity incident and event tickets using approved ticketing and case-management systems.
• Conduct proactive threat-hunting activities and correlate security events across multiple platforms to identify malicious activity, emerging threats, patterns, and trends.
• Perform wireless security scans of facilities and document, analyze, and report findings.
• Use CND tools and knowledge of network security architecture, enterprise services, adversary TTPs, malware, and attack vectors to support analysis and investigation.
• Prepare and deliver operational, technical, and situational-awareness briefings and written reports to Government and program stakeholders.
• Support annual cyber defense exercises and development or improvement of CND tactics, techniques, procedures, best practices, manuals, and standard operating procedures.

• U.S. Citizenship.
• Active TS/SCI security clearance at the time of hire.
• BA/BS in CS, IT, IA or related area of study desired; without a degree 8+ years relevant professional experience in those fields.
• Must also have and be able to reflect 5+ years concentrated experience in CND discipline regardless of having a degree or not. 3+ years professional experience in monitoring and investigating alerts from cybersecurity tools, as well as general knowledge of IT systems and networks to assist in threat hunt activities.
• Significant experience with SIEM platforms such as Splunk and Elastic; NIDPS technologies such as Cisco Fire Power and Palo Alto NGFW; and host-based tools such as Trellix ePO, Microsoft Defender, and Tanium.
• Knowledge of incident-management lifecycle processes, network security architecture and defense-in-depth concepts, common adversary TTPs, and enterprise services including domain controllers, DNS, email, print, and web servers.
• Working knowledge of network traffic and…