S

Solutions³

Cybersecurity, ITOM, ITSM consulting and training

Network Based Systems Analyst 2

Security Operations & Incident ResponseConfirmed live in the last 24 hours
Full-timePensacola, FL, USA$75k - $94k

About the Job

Requirements

  • Must be a U.S. citizen.
  • Must have an active Top Secret/Sensitive Compartmented Information clearance.
  • Must be able to obtain Department of Homeland Security suitability before starting employment.
  • Must have at least 2 years of directly relevant experience in cyber defense analysis using leading-edge technologies and industry-standard cyber defense tools.
  • Must have experience successfully developing and deploying signatures.
  • Must have experience detecting host- and network-based intrusions via intrusion detection technologies such as Snort.
  • Must have experience implementing incident-handling methodologies.
  • Must have experience implementing protocol analyzers.
  • Must have experience collecting data from a variety of cyber defense resources.
  • Must have experience reading and interpreting signatures such as Snort signatures.
  • Must have experience performing packet-level analysis.
  • Must have experience conducting trend analysis.
  • A bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, or a related field is required; alternatively, a high school diploma and at least 4 years of network investigations experience.
  • Must be able to characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.
  • Must be able to coordinate with enterprise-wide cyber defense staff to validate network alerts.
  • Must be able to document and escalate incidents, including their history, status, and potential impact, for further action.
  • Must be able to perform cyber defense trend analysis and reporting.
  • Must be able to perform event correlation using enterprise information sources to gain situational awareness and determine the effectiveness of an observed attack.
  • Must be able to provide daily summary reports of network events and activity relevant to cyber defense practices.
  • Must be able to receive and analyze network alerts from enterprise sources and determine possible causes.
  • Must be able to detect, identify, and report possible attacks, intrusions, anomalous activity, and misuse, and distinguish them from benign activity.
  • Must be able to use cyber defense tools for continual monitoring and analysis of system activity to identify malicious activity.
  • Must be able to analyze malicious activity to determine exploited weaknesses, exploitation methods, and effects on systems and information.
  • Must be able to identify and analyze anomalies in network traffic using metadata.
  • Must be able to validate intrusion detection system alerts against network traffic using packet analysis tools.
  • Must be able to identify network-device applications and operating systems based on network traffic.
  • Must be able to reconstruct malicious attacks or activity from network traffic.
  • Must be able to identify network-mapping and operating-system fingerprinting activities.
  • Must be able to assist in constructing signatures for cyber defense network tools in response to new or observed threats within the network environment or enclave.

Responsibilities

  • Provide frontline response for digital forensics and incident response and proactively hunt for malicious cyber activity.
  • Monitor network activity and analyze information from varied sources to identify and report events that occur or may occur within the network, helping protect information, information systems, and networks from threats.

Desired Qualifications

  • Python programming experience.
  • A strong mathematics and science background.
  • Experience with Carnegie Mellon SiLK tool suite.
  • One or more of the following professional certifications: GNFA, GCIH, GCIA, GSEC, CASP+, CySA+, PaLMS, or FedVTE.
  • GSEC (SANS401), ArcSight or another SIEM solution, Network+, and Security+ certifications.

About the Company

Solutions³

Cybersecurity, ITOM, ITSM consulting and training

Solutions³ provides cybersecurity, IT operations management (ITOM), and IT service management (ITSM) consulting and training, with implementation supported by industry-standard practices. It works through a people–process–technology lifecycle that includes advisory services, training, and deployment of market-ready applications, in partnership with the DVMS Institute to Create, Protect, Deliver, and Verify Trusted Digital Business value. It stands apart by combining a formal, standards-driven end-to-end approach with recognized accreditations (APMG International, UK NCSC/GCHQ, DHS/CISA) and a collaborative methodology that yields clearly defined, executable projects aligned to client objectives. Its goal is to help organizations of any size manage digital risk, improve resiliency, and create value from digital services through governance, training, and proven implementation practices.

Company size
1-10
Company stage
Not listed
Total funding
Not listed
Headquarters
Wyckoff, NJ
Founded
2003

Recently Posted Jobs

Explore more opportunities at Solutions³

See more jobs