Apply on Employer Site

BGIS | Critical Solutions Group · 1 week ago

T1 Cyber Network Defense Analyst – Day Shift (w/ active TS)

Washington, DC

Full-time

Hybrid

Entry Level

$58K/yr - $74K/yr

2+ years exp

Critical Solutions is seeking a Tier 1 Cyber Network Defense Analyst to support federal customers in Washington, DC. The role involves providing SOC support, conducting cyber analysis, and monitoring network security to detect threats and document investigations.

ConsultingCRMData CenterInformation TechnologySoftware

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Utilize a SIEM for enterprise monitoring and detection

Create Security Event Notifications to document investigation findings

Perform critical thinking and analysis to investigate cyber security alerts

Analyze network traffic using enterprise tools (e.g. Full PCAP, Firewall, Proxy logs, IDS logs, etc)

Collaborate with team members to analyze an alert or a threat

Stay up to date with latest threats

Monitor shared email box for notifications and requests

Utilize OSINT to aid in their investigation

Contribute to content tuning requests

Qualification

SIEM utilizationNetwork AdministrationCybersecurity analysisPacket analysisUnix/Linux AdministrationSoftware developmentNetwork security devicesCommon malware knowledgeScripting languagesHelp desk/IT supportWindows OS familiarityAntivirus knowledgeGeneral network protocolsSOC familiarityCritical thinkingTeam collaboration

Required

Active TS/SCI and must be able to obtain and maintain an Entry on Duty (EOD) clearance

must have the ability to work non-core hours, if necessary

Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or related field AND a minimum of two (2) years professional experience in the areas listed below: Network Administration, Unix/Linux Administration, Software engineering, Software development, Systems administration, Help desk/IT support

The ideal candidate is a self-motivated individual in pursuit of a career in cyber security

Familiarity with a SOC's purpose and role within an organization

General understanding of common network ports and protocols (e.g. TCP/UDP, HTTP, ICMP, DNS, SMTP, etc)

Familiarity with network topologies and network security device functions (e.g. Firewall, IDS/IPS, Proxy, DNS, etc)

Familiarity with packet analysis tools such as Wireshark

Able to perform critical thinking and analysis to investigate cyber security alerts

Familiarity with common malware and attack vectors

Familiarity with Windows operating systems and standard OS logging

Familiarity with Antivirus, DLP, and host based firewalls

Must have one of the following certifications: A+ CE, CCNA-Security, CND, Network+ CE, SSCP, Security+, CySA+