Cyber Defense Analyst 3 at Swift

Annapolis Junction, Maryland, United States -

Full Time

Start Date

Immediate

Expiry Date

09 Sep, 26

Salary

0.0

Posted On

11 Jun, 26

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cyber Defense, Threat Hunting, Network Analysis, TCP/IP, Wireshark, Splunk, SIEM, Active Directory, Incident Response, Triage, Event Correlation, Intrusion Detection

Industry

IT Services and IT Consulting

Description

For the OPS Consulting team, ‘the power to help’ means helping our clients, helping serve the mission, helping our employees and their families, and helping the community. Headquartered in Hanover, MD. OPS Consulting has over two decades of experience specializing in the most mission-critical operations. We are thought leaders and innovators. The ingenuity of our developers, engineers, cyber experts, linguists, and analysts are dedicated to empowering our clients, fulfilling The Mission, and remaining trusted leaders and advisers in national security and technology solutions. We are looking for a Cyber Defense Analyst 3 to join a growing team in Annapolis Junction, MD. Responsibilities: * Use cyber defense tools to monitor, detect, analyze, categorize, and perform initial triage of anomalous activity. * Generate cybersecurity cases (including event’s history, status, and potential impact for further action) and route as appropriate. * Perform advanced manual analysis to hunt previously unidentified threats. * Identify cyber-attack phases based on knowledge of common attack vectors and network layers, models and protocols. * Apply techniques for detecting host- and network-based intrusions. * Analyze malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information. * Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack. * Possess deep knowledge of active directory abuse used by attackers for lateral movement and persistence. * Perform after-action reviews of team products to ensure completion of analysis. * Lead and mentor team members as a technical expert. Requirements: * Eight (8) years of demonstrated experience as a CDA in programs and contracts of similar scope, type, and complexity. * A technical bachelor’s degree from an accredited college or university may be substituted for two (2) years of CDA experience. * Two (2) years of demonstrated and practical experience in TCP/IP fundamentals. * Two (2) years of demonstrated experience with tcpdump or Wireshark. * Three (3) years of demonstrated experience using security information and event management suites (such as Splunk, ArcSight, Kibana, LogRhythm). * Three (3) years of demonstrated experience in network analysis and threat analysis software utilization. * CSSP Analyst baseline certification (e.g., CEH, CySA+, CFR, etc.) * IAT Level I or II certification * Computing Environment (CE) certification for supported systems * Global Information Assurances Certificate (GIAC) OR Global Certified Incident Handler (GCIH) * US citizenship and an active TS/SCI with Polygraph security clearance required

Responsibilities

Monitor and analyze anomalous activity using cyber defense tools to detect and triage threats. Lead and mentor team members while performing advanced manual analysis to identify unidentified threats and exploitation methods.