Intrusion Analyst 3

Gormat • Annapolis Junction, MD

6d

About The Position

We are looking for an Intrusion Analyst to analyze target digital network data and identify unauthorized activities using SIGINT and computer network defense resources. You will categorize network traffic, document malicious tactics, techniques, and procedures, and develop mitigation strategies to protect our systems. The Intrusion Analyst Level 3 shall possess the following capabilities: Analyze target digital network data to discover, analyze, and document malicious or unauthorized activity using information collected from a variety of SIGINT and computer network defense resources. Analyze metadata collected from tasked communications systems in order to identify, locate, and track targets, and to accurately report the intelligence gained from metadata analysis. Categorize traffic as benign, suspicious, or malicious activity; and document malicious tactics, techniques, and procedures (TTPs). Develop and implement mitigation strategies. Have a network and/or host-based focus. CASA, will need extra vetting; Deep packet/data inspection; hex dumps to tease out protocols; strong signals/protocol analysis capabilities (451/452 grad preferred); packetswing, DVT/WVT, VINTAGEHARVEST, BROADSKY, XKEYSCORE (FP, MP, schemas)

Requirements

• Master's degree with 6 years of relevant experience.
• Bachelor's Degree with 8 years of relevant experience.
• Associates degree with 10 years of experience.
• Bachelor's Degree must be in Computer Science, Computer Engineering, Information Systems, or related discipline from accredited college or university.
• CISSP, CEH, Sec+, Net+, GIAC GREM and/or CREA Certification is required.
• TS/SCI with polygraph is required.

Nice To Haves

• Relevant experience must be in malware analysis and programming experience in C, C#, C++, Java, Perl, or Python is preferred.
• strong signals/protocol analysis capabilities (451/452 grad preferred)
• CASA, will need extra vetting
• Deep packet/data inspection
• hex dumps to tease out protocols
• packetswing, DVT/WVT, VINTAGEHARVEST, BROADSKY, XKEYSCORE (FP, MP, schemas)

Responsibilities

• Analyze target digital network data to discover, analyze, and document malicious or unauthorized activity using information collected from a variety of SIGINT and computer network defense resources.
• Analyze metadata collected from tasked communications systems in order to identify, locate, and track targets, and to accurately report the intelligence gained from metadata analysis.
• Categorize traffic as benign, suspicious, or malicious activity
• Document malicious tactics, techniques, and procedures (TTPs).
• Develop and implement mitigation strategies.
• Have a network and/or host-based focus.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level