Network Defense Analyst at DESE Research, Inc. in Huntsville, AL, USA

Job description

• DESE Research, Inc. seeks a Network Defense Analyst to join an exciting and growing team focused on the cybersecurity analysis, protection, and defense of critical Department of Defense (DoD) networks and infrastructure.
• The candidate will join a team of analysts to provide monitoring and analysis of DoD networks to maintain defense and safeguarding of protected data and access. The candidate will additionally perform network flow analysis as well as deep packet inspection to identify vulnerabilities, traffic anomalies, or concerns related to abnormal activity on protected networks. The team will leverage network monitoring tools to process alerts related to vulnerabilities and compile reports based on findings for DoD stakeholders. The candidate will also provide assistance to sites for the assurance of cybersecurity policy compliance and readiness of network infrastructure including firewalls, routers, switches, as well as cloud-hosted services.

Responsibilities

• Analyzes network data using packet capture analysis, network flow analysis, as well as Cloud Logs to identify and report on potential security incidents
• Assists customers with remediation of a wide range of cybersecurity issues including vulnerabilities, misconfigurations, cyber incidents, and non-compliance
• Is familiar with encryption technologies, penetration and vulnerability analysis of various security technologies, and information technology security research
• Provides analysis, recommendations, and verification to achieve acceptable mitigation of security incidents
• Generates and publishes monthly reports providing customers with a summary of their cyber security posture and provides assistance for customers with consistent issues
• Conducts daily review of open vulnerabilities using both Network and Endpoint based security solutions, reporting on high risk findings and tracking mitigation efforts until resolved
• Enforces endpoint quarantine policies on extremely high risk devices using Endpoint Security Solution
• Assists customers in preparing for upcoming cyber security posture assessments by providing overview of topics covered by assessment, and coordinates with customer and other operational teams to mitigate potential high risk findings observed on the site's network
• May require interfacing with external entities (e.g. law enforcement, intelligence/government agencies, etc.)

Requirements

• Bachelor's Degree in Cybersecurity, Computer Information Systems, or similar field of study
• Applicants must at least possess an existing Secret security clearance.
• One of the following active certifications (or ability to obtain within two months of hire):
• Bachelor's degree or higher in a related field
• Minimum of 1-4 years of related experience
• Active CompTIA Security+CE certification with the ability to obtain one of the following certifications within two months of hire:
• CEH, CFR, CCNA Cyber Ops, CCNA-Security, CySA+, GCIA, GCIH, GICSP, Cloud+, SCYBER, PenTest+
• Strong written and verbal communication skills
• Ability to communicate and present information to customers at varying levels of technical detail
• Comfortable working in a constantly adapting and changing environment that may require learning new skills and the ability to adjust priorities
• Basic knowledge of Computer Network Defense activities to include standard cyber-defense Intrusion Detection Systems (IDS), Intrusion Protection Systems (IPS), network monitoring, packet capture analysis, network flow analysis, network proxy operation, firewalls, and anti-virus capabilities
• Basic knowledge of vulnerability and risk management techniques in a cyber security setting, including handling risk/severity-based prioritization and decision making
• Experience analyzing alerts using PCAPs and/or cloud logs, as well as an understanding of network threats, potential network exploitation, and methods to defend against potential malicious activity
• Proficiency in Office 365 tools at a professional level
• Experience using vulnerability scanning solutions such as Tenable Nessus
• Experience using data presentation/automation tools such as PowerBI or Tableau
• Experience assessing Security Technical Implementation Guide (STIG) findings
• Experience working with Endpoint Security Solutions such as Trellix or Microsoft Defender Endpoint
• Experience handling risk/severity-based prioritization and decision making
• CySA+ or CEH certification
• Top Secret Clearance

Skills

Preferred

• CySA+ or CEH certification

Benefits

• At DESE, we are committed to creating a company that is known for its respect and care for employees. We understand that happy employees are what keeps our business going and we strive to provide the best opportunities for each individual working on our team! Here are a few reasons you will love working here:
• · Competitive health, dental and vision insurance with affordable premiums
• · Flexible work schedules
• · Two different flexible spending account options
• · Company paid life insurance with options for employee paid additional
• · Performance bonus program
• · Education reimbursement program
• · Company paid personal leave for approved philanthropic activities
• · Vacation, Sick & Holiday leave
• · Robust 401k profit sharing plan
• · Opportunities for internal promotions
• · Employee referral incentive program
• · Rewards and gifts for service anniversaries