SciTec

SciTec, Inc. is a dynamic small business which delivers advanced sensor processing technologies and scientific instrumentation capabilities in support of national security and defense applications. We support customers throughout the Department of Defense and U.S. Government in building innovative new tools to deliver unique, world-class data exploitation capabilities. SciTec has an immediate opportunity for a talented Information Systems Security Manager (ISSM) in our Boulder, CO office. The ISSM will be responsible the accreditation and administration of a secure computing environment, both leading the implementation of technical security controls and spearheading coordination with accrediting and assessing agencies. The ISSM will need to work well in a team environment with a commitment to ensure security awareness and techniques are communicated effectively across the workforce. SciTec is searching for a candidate who will thrive in an environment where they are both expected to take the initiative to solve problems and empowered to see problems through to their conclusion.RequirementsDUTIES: <ul> <li>Leading the development, maintenance, and evaluation Information System (IS) security documentation, including System Security Plans (SSPs), Continuity of Operations Plans (COOPs), and Standard Operating Procedures (SOPs).</li> <li>Conducting cybersecurity controls assessments in accordance with applicable regulatory guidance, including NIST 800-53, NIST 800-37, NIST 800-60, and DoD 8500.01. Managing Plans of Actions and Milestones (POA&amp;M) originating from these assessments.</li> <li>Upload all security control evidence to the Governance, Risk, and Compliance (GRC) application (eMASS) to support security control implementation during the monitoring phase.</li> <li>Develop and execute a Continuous Monitoring program for information systems in accordance with NIST 800-53</li> <li>Ensure that selected security controls are implemented and operating as intended during all phases of the Information System (IS) lifecycle and RMF process</li> <li>Ensure that system security documentation is developed, maintained, reviewed, and updated on a continuous basis. </li> <li>Conduct required IS vulnerability scans according to risk assessment parameters. </li> <li>Continuously evaluating system security posture, identifying opportunities for improvement, and supporting the implementation of these improvements.</li> <li>Supporting the local SciTec Facility Security Officer (FSO) in ensuring the physical protection of information technology systems, including supporting the deployment of physical security measures such as intrusion detection systems.</li> <li>Contribute to Cybersecurity Maturity Model Certification (CMMC) and NIST SP 800-171 which may include authoring policy and procedure, capturing artifacts, and working related projects.</li> <li>Contributing to other corporate security and information assurance activities throughout the company with System Administrators, Security, and other stakeholders.</li> <li>Successful candidates will have strong written and communication skills to maintain a relationship with government counterparts and other mission partners.</li> <li>Ensure the removal and retirement of ISs being decommissioned in coordination with the system owner</li> <li>At least two years serving as an ISs Security Officer or Manager at a cleared facility. </li> <li>Familiarity with the use and operation of DISA SCAP and STIGViewer tools</li> </ul> <ul> <li>Is technical lead for the Risk Management Framework (RMF) package creation and compliance. </li> </ul> REQUIREMENTS: <ul> <li>Must be a U.S. Citizen. </li> <li>Candidates must have an active Secret government security clearance.</li> <li>2 years of experience specifically supporting the administration of government or contractor information technology systems under the oversight of the DoD or the Intelligence Community.</li> </ul> <ul> <li>4 year degree in Information Technology, Cybersecurity, Computer Science or other related field</li> <li>Must have experience with Windows/Linux based troubleshooting; understand where to locate specific log files for forensics.</li> </ul> <ul> <li>Ability to evaluate effectiveness, suitability, survivability, and interoperability of systems, relating to cybersecurity and provide key feedback to improve the overall cybersecurity posture. </li> <li>Ability to research and develop solutions to emerging cyber threats.</li> <li>Proficient with Microsoft Word, Microsoft Excel, OneDrive. </li> <li>Self-starter with ability to work independently.</li> <li>Ability to understand, explain, interpret, and apply rules, regulations, directives, and procedures.</li> </ul> PREFERRED EXPERIENCE, SKILLS, AND ABILITIES: <ul> <li>An active TOP SECRET clearance.</li> <li>A CISSP (or CISSP Associate) certification, or an alternate qualifying certification satisfying DoD 8570.01M requirements for an Information Assurance Technician Level III or an Information Assurance Manager Level II.</li> <li>Prior successful experience as an ISSM.</li> <li>Prior experience with NIST 800-171, NIST 800-53 (both DIACAP 8500.2 and Risk Management Framework), and Continuous Monitoring and Risk Scoring (CMRS).</li> <li>A college degree in computer science, info tech, info security, or a related field.</li> <li>Experience working with the ELK stack.</li> <li>Experience with Azure, AWS, or similar cloud environments.</li> <li>Have experience with VMware or other virtualization software.</li> <li>Python, PHP, Perl, PowerShell, or Bash scripting experience.</li> <li>Experience administering the system functions including security policies and account management of Microsoft Windows and Server as well as Linux/Unix-based systems.</li> <li>Incident response and reporting experience.</li> </ul>BenefitsAs a small business, SciTec, Inc. offers room for growth and a flexible, fast-paced work environment. We work daily to develop one-of-a-kind solutions for challenging national problems. SciTec encourages collaboration across our offices in Boulder, El Segundo, Dayton, Huntsville, Virginia, and our headquarters in Princeton, and provides access to opportunities across the corporate spectrum. Initiative is expected and encouraged, all employees have the opportunity and flexibility to broaden their technical horizons, and our daily work makes an impact on the world around us. SciTec offers a highly competitive salary and benefits package, including a variety of benefits including health insurance, parental leave, vision, life, and disability insurance, 401(k)plan with employer contribution, holidays and paid time off plans (including vacation and sick time), an annual profit-sharing plan, and an annual performance bonus plan. The salary range for this position is $83,000 to $130,000; however, SciTec considers several factors when extending an offer of employment, including but not limited to, the role and associated responsibilities, a candidate’s work experience, education/training, and key skills. This is not a guarantee of compensation. SciTec is committed to hiring and retaining a diverse workforce and is proud to be an Equal Opportunity/Affirmative Action employer.

Boulder

Information Systems Security Manager (ISSM)

Maveris

Maveris is an IT and cybersecurity services company committed to helping organizations create secure digital solutions to accelerate their mission. We are Veteran-owned and proud to serve customers across the Federal Government and private sector. We have an opening for a full-time, permanent Cyber Security Defense Analyst to join our talented, dynamic team in support of the Department of Veterans Affairs customer.Veterans are encouraged to apply. The Cyber Security Threat Hunter will be part of a team that creates hypothesis driven investigations to search out Advanced Persistent Threats and Focused Operators. The individual will need to possess the ability to work well both individually and as part of a team with a shared mission.Key Responsibilities:<ul> <li>Provide proactive Advanced Persistent Threat (APT) and Focused Operator (FO) hunting, incident response support, and advanced analytic capabilities</li> <li>Profile and track APT/FO actors that pose a threat in coordination with threat intelligence support teams</li> <li>Review and analyze log files from various sources such as SIEM, packet captures, and host logs to report any unusual or suspect activities</li> <li>Develop and execute custom scripts to identify host-based indicators of compromise</li> <li>Provide targeted attack detection and analysis, including the development of custom signatures and log queries and analytics for the identification of targeted attacks</li> <li>Determine scope of intrusion identifying the initial point of access or source</li> <li>Recommend remediation activities to secure the source or initial point of access of intrusion</li> <li>Communicate effectively to all customers and stakeholders</li> <li>Provide executive level cyber security strategic recommendations along with security engineering recommendations and custom solutions to counter adversarial activity</li> <li>Provide technical summary of findings in accordance with established reporting procedures</li> <li>Provide identification of obfuscation techniques</li> <li>Knowledge of and ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)</li> <li>Knowledge of and ability to apply techniques for detecting host and network-based intrusions using intrusion detection technologies</li> <li>Knowledge of and ability to utilize cyber defense and vulnerability assessment tools</li> <li>Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins)</li> <li>Knowledge of what constitutes a network attack and a network attack’s relationship to both threats and vulnerabilities</li> <li>Knowledge of Insider Threat investigations, reporting, investigative tools and laws/regulations</li> <li>Knowledge of adversarial tactics, techniques, and procedures</li> <li>Knowledge of the common attack vectors on the network layer</li> <li>Knowledge of different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks)</li> <li>Knowledge of cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored)</li> <li>Knowledge of cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks)</li> <li>Skilled in using security event correlation tools</li> <li>Knowledge of and ability to utilize malware analysis concepts and methodologies</li> </ul>Requirements<ul> <li>Experience with common threat hunting solutions including Splunk, packet analysis (e.g., Wireshark), Netflow, QRadar or other SIEMs, etc.</li> <li>An understanding of the MITRE ATT&amp;CK Framework and Cyber Kill Chain methodologies</li> <li>Experience with threat hunting advanced persistent threats</li> <li>In depth understanding of NIST SP 800-61, US CERT, and Office of Management and Budget (OMB) standards</li> <li>Scripting experience, such as Python, PowerShell, etc. is a plus</li> <li>Strong time management skills with attention to detail</li> <li>Strong critical thinking skills</li> <li>Strong interpersonal and collaborative skills, with the ability to work in a team environment</li> <li>Ability to communicate effectively to both technical and non-technical audiences</li> <li>Skilled in developing and deploying signatures</li> <li>Skilled in detecting host and network-based intrusions via intrusion detection technologies</li> <li>Skilled in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes</li> <li>Skilled in collecting data from a variety of cyber defense resources</li> <li>Skilled in recognizing and categorizing types of vulnerabilities and associated attacks</li> <li>Skilled in reading and interpreting signatures (e.g., snort)</li> <li>Skilled in assessing security controls based on cybersecurity principles and tenets. (e.g., CIS CSC, NIST SP 800-53, Cybersecurity Framework, etc.)</li> <li>Skilled in performing packet-level analysis</li> <li>Able to develop content for cyber defense tools</li> <li>Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources</li> <li>Coordinate with enterprise-wide cyber defense staff to validate network alerts</li> <li>Perform cyber defense trend analysis and reporting</li> <li>Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack</li> <li>Receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts.</li> <li>Ability to determine tactics, techniques, and procedures (TTPs) for intrusion sets</li> <li>Ability to conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings)</li> <li>Ability to reconstruct a malicious attack or activity based off network traffic</li> <li>Assist in the construction of signatures which can be implemented on cyber defense network tools in response to new or observed threats within the network environment or enclave.</li> <li>Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected cyber incidents and articulate the event's history, status, and potential impact for further action in accordance with the organization's cyber incident response plan.</li> <li>Analyze and report organizational security posture trends.</li> <li>Analyze and report system security posture trends</li> <li>Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on the enterprise</li> <li>Provides cybersecurity recommendations to leadership based on significant threats and vulnerabilities</li> <li>Participation in rotational on-call support</li> </ul><h3>Relevant certifications and training preferred:</h3><ul> <li>GIAC Certified Incident Handler (GCIH)</li> <li>GIAC Certified Forensics Examiner (GCFE)</li> <li>GIAC Certified Intrusion Analyst (GCIA)</li> <li>GIAC Certified Forensic Analyst (GCFA)</li> <li>GIAC Certified Network Forensic Analyst (GNFA)</li> <li>GIAC Cyber Threat Intelligence (GCTI)</li> <li>GIAC Reverse Engineering Malware (GREM)</li> </ul>BenefitsMaveris attracts and retains talent of the highest caliber by offering opportunities to work in exciting and challenging environments surrounded by bright minds. Our employees are our most prized asset and are rewarded with highly competitive compensation and a top-tier benefits package, including:<ul> <li>401(k) with company match</li> <li>Dental Insurance</li> <li>Health Insurance</li> <li>Vision Insurance</li> <li>Life Insurance</li> <li>Paid Time Off</li> </ul><h3>About Maveris</h3>Maveris offers exceptional, mission-focused, solutions to organizations facing highly complex IT, digital, and cybersecurity challenges. Our success is achieved by maintaining an environment of trust where people are encouraged to reach their fullest potential. Every candidate that applies to Maveris brings something unique to the table, and because our team is diverse, we consistently meet our goals and exceed client expectations. If you are a highly-motivated person with a willingness to learn, we invite you to apply today to join our team!To learn more about employee benefits visit <a href="http://www.maveris.com/" rel="noopener noreferrer nofollow ugc" target="_blank">www.maveris.com</a>.For company updates and the latest job postings check us out on <a href="https://www.linkedin.com/company/maveris" rel="noopener noreferrer nofollow ugc" target="_blank">LinkedIn</a>.If you'd like to read about some of our research and projects head over to <a href="https://medium.com/maverislabs" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Labs</a>.Want a more behind the scenes view? Check out our blog <a href="https://maveris.com/insights/" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Insights</a> to learn more about the team behind the solutions.

Hines

Cyber Security Threat Hunter

The Insider Threat Analyst (Security Operations) will be part of a team that monitors for and investigates insider threat activity in a large federal agency. Discovered threat activity will be captured and documented in reports sent to cross organization leadership. The analyst will develop custom searches using a wide array of network and host-based security toolsets (Splunk, QRadar, Microsoft Defender etc.). The individual will need to possess the ability to work well both individually and as part of a team with a shared mission.Veterans encouraged to apply.<h3>Key Responsibilities</h3><ul> <li>Review and analyze log files from various sources such as SIEM, EDR, packet captures, and host logs to report any unusual or suspect activities </li> <li>Provide targeted detection and analysis, including the development of custom signatures and log queries and analytics for the identification of insider threats</li> <li>Monitor User Activity Monitoring (UAM) and User Entity Behavioral Analytics (UEBA) tools</li> <li>Determine scope of intrusion and recommend remediation activities to secure the source or initial point of access of intrusion</li> <li>Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources</li> <li>Coordinate with enterprise-wide cyber defense staff to validate network alerts</li> <li>Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed threat</li> <li>Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings)</li> <li>Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on the enterprise</li> <li>Provide recommendations and custom solutions to counter insider threat activity</li> <li>Provide technical summary of findings in accordance with established reporting procedures</li> <li>Identify insider threat use-cases for automation using a security orchestration and automation product</li> </ul>Requirements<ul> <li>Must possess a minimum of three years experience performing in Insider Threat analysis</li> <li>Candidate MUST be proficient with Splunk Query Language </li> <li>Experience with common threat hunting solutions including Splunk, packet analysis (e.g., Wireshark), NetFlow, QRadar or other SIEMs, etc.</li> <li>An understanding of the MITRE ATT&amp;CK Framework and Cyber Kill Chain methodologies</li> <li>Understanding of NIST SP 800-61, US CERT, and Office of Management and Budget (OMB) standards</li> <li>Knowledge of and ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)</li> <li>Knowledge of and ability to apply techniques for detecting host and network-based intrusions using intrusion detection technologies</li> <li>Experience using ticketing systems to include ServiceNow (SNOW) and BMC Remedy</li> <li>Knowledge of cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored)</li> <li>Scripting experience, such as Python, PowerShell, etc. is a plus</li> <li>Strong time management skills with attention to detail</li> <li>Strong critical thinking skills</li> <li>Strong interpersonal and collaborative skills, with the ability to work in a team environment</li> <li>Ability to develop content for cyber defense tools</li> <li>Ability to write insider threat reports to both technical and non-technical audiences; reports are evaluated for quality and clarity</li> </ul>Relevant certifications and training are a plus:<ul> <li>GIAC Certified Incident Handler (GCIH)</li> <li>GIAC Certified Forensics Examiner (GCFE)</li> <li>GIAC Certified Intrusion Analyst (GCIA)</li> <li>GIAC Certified Forensic Analyst (GCFA)</li> <li>GIAC Certified Network Forensic Analyst (GNFA)</li> <li>GIAC Cyber Threat Intelligence (GCTI)</li> <li>GIAC Reverse Engineering Malware (GREM)</li> <li>Certified Information Systems Security Specialist (CISSP)</li> <li>Splunk Core Certified Power User</li> </ul>BenefitsMaveris attracts and retains talent of the highest caliber by offering opportunities to work in exciting and challenging environments surrounded by bright minds. Our employees are our most prized asset and are rewarded with highly competitive compensation and a top-tier benefits package, including:<ul> <li>401(k) with company contribution</li> <li>Dental Insurance</li> <li>Health Insurance</li> <li>Vision Insurance</li> <li>Life Insurance</li> <li>Paid Time Off</li> </ul><h3>About Maveris</h3>Maveris offers exceptional, mission-focused solutions to organizations facing highly complex IT, digital, and cyber security challenges. Our success is achieved by maintaining an environment of trust where people are encouraged to reach their fullest potential. Every candidate that applies to Maveris brings something unique to the table, and because our team is diverse, we consistently meet our goals and exceed client expectations. If you are a highly-motivated person with a willingness to learn, we invite you to apply today to join our team!To learn more about employee benefits visit <a href="http://www.maveris.com/" rel="noopener noreferrer nofollow ugc" target="_blank">www.maveris.com</a>.For company updates and the latest job postings check us out on <a href="https://www.linkedin.com/company/maveris" rel="noopener noreferrer nofollow ugc" target="_blank">LinkedIn</a>.If you'd like to read about some of our research and projects head over to <a href="https://medium.com/maverislabs" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Labs</a>.Want a more behind the scenes view? Check out our blog <a href="https://maveris.com/insights/" rel="noopener noreferrer nofollow ugc" target="_blank">Maveris Insights</a> to learn more about the team behind the solutions.We are an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or expression, pregnancy, age, national origin, disability status, genetic information, protected veteran status, or any other characteristic protected by law.

Martinsburg

Insider Threat Analyst (Security Operations)

SciTec, Inc. is a dynamic small business which delivers advanced sensor processing technologies and scientific instrumentation capabilities in support of national security and defense applications. We support customers throughout the Department of Defense and U.S. Government in building innovative new tools to deliver unique, world-class data exploitation capabilities. SciTec has an immediate opportunity for a talented Information Systems Security Manager (ISSM) in our Boulder, CO office. The ISSM will be responsible the accreditation and administration of a secure computing environment, both leading the implementation of technical security controls and spearheading coordination with accrediting and assessing agencies. The ISSM will need to work well in a team environment with a commitment to ensure security awareness and techniques are communicated effectively across the workforce. SciTec is searching for a candidate who will thrive in an environment where they are both expected to take the initiative to solve problems and empowered to see problems through to their conclusion.RequirementsDuties: <ul> <li>Ensure the day-to-day implementation, oversight, continuous monitoring, and maintenance of the security configuration, practices, and procedures for each information system </li> <li>Provide liaison support between the ISSM, system administrators, and system users</li> <li>Ensure that selected security controls are implemented and operating as intended during all phases of the information system lifecycle </li> <li>Ensure that system security documentation is developed, maintained, reviewed, and updated on a continuous basis </li> <li>Conduct required information system vulnerability scans according to risk assessment parameters. </li> <li>Develop Plan of Action and Milestones (POAMs) in response to reported security vulnerabilities </li> <li>Coordinate system owner concurrence for correction or mitigation actions </li> <li>Monitor security controls for information systems to maintain security Authorized to Operate (ATO) </li> <li>Upload all security control evidence to the Governance, Risk, and Compliance (GRC) application (eMASS) to support security control implementation during the monitoring phase </li> <li>Ensure that changes to an information system, its environment, and/or operational needs that may affect the authorization status are reported to the system owner and information system Security Manager (ISSM) </li> <li>Ensure the removal and retirement of information systems being decommissioned in coordination with the system owner and ISSM </li> <li>At least one year serving as an Information Systems Security Officer (ISSO) at a cleared facility. </li> <li>Familiarity with the use and operation of security tools including SCAP, OpenRMF, Tenable Nessus or similar applications. </li> </ul> <ul> <li>The ISSO will apply broad technical, operational, and policy expertise in the management of all aspects of operational Information System Security and Computer Network Defense.</li> <li>Is technical lead for the Risk Management Framework (RMF) package creation and compliance </li> <li>Contribute to Cybersecurity Maturity Model Certification (CMMC) efforts on the unclassified network.</li> <li>Performs other related duties and assignments as required.</li> </ul> Requirements: <ul> <li>Must be a U.S. Citizen. </li> <li>Must have at least a high school diploma.</li> <li>Hold an active Secret, or higher, US government security clearance.</li> </ul> <ul> <li>Have at least two years of systems administration experience.</li> <li>Must have experience with Windows/Linux based troubleshooting; understand where to locate specific log files for forensics.</li> <li>Understanding and practical application with one or more of DoD policies and directives, NIST standards, RMF controls, JSIG, and/or CMMC</li> <li>Experience with certifying compliance of various operating systems.</li> <li>Ability to evaluate effectiveness, suitability, survivability and interoperability of systems, relating to Cybersecurity and provide key feedback to improve the overall Cybersecurity posture </li> <li>Ability to research and develop solutions to emerging cyber threats.</li> <li>Proficient with Microsoft Word, Microsoft Excel, OneDrive </li> <li>Self-starter with ability to work independently</li> <li>Ability to understand, explain, interpret, and apply rules, regulations, directives, and procedures</li> <li>Have a deep understanding of computer operating systems, hardware, and software </li> </ul> Preferred experience, skills, and abilities <ul> <li>Have an active Top Secret security clearance or recently active clearance within 24 months</li> <li>Possess a current DoD 8570 certification (Security+, CISSP, etc.)</li> <li>Four-year degree in Information Technology, Cybersecurity, Computer Science or related field</li> <li>Python, PHP, Perl, PowerShell, or Bash scripting experience.</li> <li>Experience working with the ELK stack.</li> <li>Experience administering the system functions including security policies and account management of Microsoft Windows and Server as well as Linux/Unix-based systems.</li> <li>Have experience with VMware or other virtualization software.</li> <li>Experience with Azure, AWS, or similar cloud environments</li> <li>Have experience working in or directly supporting the DoD or other U.S. government entities</li> <li>Incident handling experience </li> </ul>BenefitsAs a small business, SciTec, Inc. offers room for growth and a flexible, fast-paced work environment. We work daily to develop one-of-a-kind solutions for challenging national problems. SciTec encourages collaboration across our offices in Boulder, El Segundo, Dayton, Huntsville, Virginia, and our headquarters in Princeton, and provides access to opportunities across the corporate spectrum. Initiative is expected and encouraged, all employees have the opportunity and flexibility to broaden their technical horizons, and our daily work makes an impact on the world around us. SciTec offers a highly competitive salary and benefits package, including a variety of benefits including health insurance, parental leave, vision, life, and disability insurance, 401(k)plan with employer contribution, holidays and paid time off plans (including vacation and sick time), an annual profit-sharing plan, and an annual performance bonus plan. The salary range for this position is $87,000 to $20,000; however, SciTec considers several factors when extending an offer of employment, including but not limited to, the role and associated responsibilities, a candidate’s work experience, education/training, and key skills. This is not a guarantee of compensation. SciTec is committed to hiring and retaining a diverse workforce and is proud to be an Equal Opportunity/Affirmative Action employer.

Information System Security Officer (ISSO)

Node.Digital

Network Forensics Cybersecurity Analyst ILocation: Arlington, VA- Must have an active TS/SCI clearance Node is supporting a U.S. Government customer to provide support for onsite incident response to civilian Government agencies and critical asset owners who experience cyber-attacks, providing immediate investigation and resolution. Contract personnel performs investigations to characterize the severity of breaches, develop mitigation plans, and assist with the restoration of services. Node is seeking a Network Forensics Cybersecurity Analyst I to support this critical customer mission. Responsibilities: - Collecting and analyzing network traffic - Monitoring of external data sources to maintain currency of Computer Network Defense threat conditions, - Performing analysis of log files from a variety of sources (e.g., network traffic logs, firewall logs, intrusion detection system logs, DNS logs) to identify possible threats to network security - Receiving and analyzing network alerts from various sources within the enterprise and determine possible causes of such alerts, - Tracking and documenting Computer Network Defense incidents from initial detection through final resolution. RequirementsRequired Skills: - U.S. Citizenship - Must have an active TS/SCI clearance - Must be able to obtain DHS Suitability - 1+ years of directly relevant experience in network investigations - Knowledge of Computer Network Defense policies, procedures, and regulations - Knowledge of TCP/IP - Knowledge of standard protocols – ICMP, HTTP/S, DNS, SSH, SMTP, etc. - Knowledge of network topologies - Knowledge of defense-in-depth principles and general attack stages with respect to network security architecture - Ability to characterize and analyze network traffic to identify anomalous activity and potential threats to network resources - Ability to identify and analyze anomalies in network traffic using metadata - Ability to reconstruct a malicious attack or activity based on network traffic - Ability to examine network topologies to understand data flow through the network - Must be able to work collaboratively across physical locations Desired Skills: - Knowledge of network device integrity concepts and methodologies - Knowledge of network analysis software, such as Wireshark - Knowledge of Wide Area Network topologies - Understanding of how to preserve evidence integrity according to standard operating procedures or national standards Required Education: BS Computer Science, Computer Engineering, Computer Information Systems, Computer Systems Engineering or related degree or a HS Diploma &amp; 3 years of network investigations experience. Desired Certifications: - DoD 8140.01 IAT Level IICompany Overview:Node.Digital is an independent Digital Automation &amp; Cognitive Engineering company that integrates best-of-breed technologies to accelerate business impact.Our Core Values help us in our mission. They include:OUR CORE VALUES**Identifying the~RIGHT PEOPLE~and developing them to their full capabilities****Our customer’s “Mission” is our “Mission”. Our~MISSION FIRST~approach is designed to keep our customers fully engaged while becoming their trusted partner****We believe in~SIMPLIFYING~complex problems with a relentless focus on agile delivery excellence****Our mantra is “~Simple*Secure*Speed~” in the delivery of innovative services and solutions**Benefits<ul> <li>Medical (90% Coverage for Employee)</li> <li>Dental</li> <li>Vision</li> <li>Basic Life (100% Coverage for Employee)</li> <li>Long Term Disability (100% Coverage for Employee)</li> <li>Health Saving Account</li> <li>401K</li> <li>Three weeks of PTO</li> <li>10 Paid Holidays</li> <li>Pre-Approved Online Training</li> </ul>

Arlington

Network Forensics Cybersecurity Analyst I

Apply to Log Files Cyber Security Jobs in companies remotely and near you. New Log Files Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Information Systems Security Manager (ISSM) at SciTec	Full Time Manager DOD Windows AWS
Cyber Security Threat Hunter at Maveris	Full Time Forensic Analyst Incident Response GCFA
Insider Threat Analyst (Security Operations) at Maveris	Remote Full Time Forensic Analyst GCFA
Information System Security Officer (ISSO) at SciTec	Full Time Manager DOD Windows AWS
Network Forensics Cybersecurity Analyst I at Node.Digital	Agile Automation Clearance DNS DOD

Log Files Cyber Security Jobs

0 Log Files Cyber Security Jobs. Page 1 of 1

5 closed log files cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Log Files Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Log Files Cyber Security Jobs

0 Log Files Cyber Security Jobs. Page 1 of 1

5 closed log files cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Log Files Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter