Cyber Network Defense Analyst with Security Clearance

Job Title: Cyber Network Defense Analyst Location: Arlington, VA (On-Site) Clearance: Active TS/SCI Required Company: Quantum Science Solutions (QSS) Compensation: Open Rate Position Overview Quantum Science Solutions (QSS) is seeking a Cyber Network Defense Analyst (CNDA) to support a critical customer mission providing remote and onsite advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation and resolution using host-based, network-based, and cloud-based cybersecurity analysis capabilities.

The Cyber Network Defense Analyst will use information collected from a variety of sources to monitor and analyze network activity for evidence of suspicious behavior. The CNDA will identify and report cyber events, analyze network environments for trends, patterns, and anomalies, and recommend proactive measures to contain incidents and protect information systems and networks from threats.

Key Responsibilities • Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources • Coordinate with enterprise-wide cyber defense staff to validate network alerts • Document and escalate incidents (including event's history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment • Perform cyber defense trend analysis and reporting • Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack • Provide daily summary reports of network events and activity relevant to cyber defense practices • Receive and analyze network alerts from various sources within the enterprise and determine possible causes of alerts • Provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities • Use cyber defense tools for continual monitoring and analysis of system activity to identify malicious activity • Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information • Determine tactics, techniques, and procedures (TTPs) for intrusion sets • Examine network topologies to understand data flows through the network • Identify and analyze anomalies in network traffic using metadata • Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings) • Validate intrusion detection system (IDS) alerts against network traffic using packet analysis tools • Identify applications and operating systems of a network device based on network traffic • Reconstruct a malicious attack or activity based off network traffic • Identify network mapping and operating system (OS) fingerprinting activities • Assist in the construction of signatures which can be implemented on cyber defense network tools in response to new or observed threats within the network environment or enclave • Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected cyber incidents and articulate the event's history, status, and potential impact for further action in accordance with the organization's cyber incident response plan • Prepare and update manuals, instructions, and operating procedures • Evaluate established methods and procedures and prepare recommendations for changes in methods and practices where appropriate • Plan and carry out difficult and complex assignments and develop new methods, approaches, and procedures • Conduct analyses and recommend resolution of complex issues affecting the specialty area • Ensure optimal use of commercially available products • Prepare and present reports • valuate the effectiveness of installed systems and services.

Mandatory Skills • U.S.

Citizenship. • Active Secret clearance. • Ability to obtain DHS Suitability. • 5+ years of directly relevant experience in cyber defense analysis using leading edge technologies and industry-standard cyber defense tools. • Experience successfully developing and deploying signatures. • Experience detecting host- and network-based intrusions using intrusion detection technologies such as Snort. • Experience implementing incident handling methodologies. • Experience implementing protocol analyzers. • Experience collecting data from a variety of cyber defense resources. • Experience reading and interpreting signatures, such as Snort signatures. • Experience performing packet-level analysis. • Experience conducting trend analysis.

Preferred Skills • GSEC (SANS401). • ArcSight or other SIEM solution experience. • Python programming experience. • Strong math and science background. • Experience with the Carnegie Mellon SiLK tool suite. Education • Bachelor's degree in Computer Science, Cyber Security, Computer Engineering, or a related field; or • High School Diploma with 7–9 years of network investigations experience. Desired Certifications • GNFA, GCIH, GCIA, GSEC, CASP+, CySA+, PaLMS, and FedVTE Why QSS? At QSS, you'll support critical customer mission by applying advanced cyber defense analysis capabilities to detect suspicious activity, investigate network threats, support incident response, and help protect critical information systems and networks.

Benefits Include: • Competitive compensation with annual performance bonuses • Premium Medical, Dental, & Vision coverage • Generous PTO plus Federal Holidays • 401(k) with company match • Professional development and certification support