Computer Network Defense Analyst - Night Shift with Security Clearance

This position is 100% Onsite. This position is in Arlington, VA, with occasional/situational travel. Certificate 8570 IAT Level II Baseline Certification (e.g. CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP) Location: San Antonio, TX Schedule 100% onsite
3rd Shift (9PM-5AM) Clearance US Citizens with DOD Top Secret/SCI Responsibilities Qualifications We are currently seeking a  Cyber Network Defense Analyst 3rd Shift (9PM-5AM)  to join the Compartmented Enterprise Services Office (CESO) effort.  This position is based in San Antonio, TX and is 100% on-site. Requires a TS/SCI US Government Security Clearance to start.

• Perform computer network incident detection and response activities to detect, correlate, identify, and characterize anomalous activity indicative of threats to the CESO enterprise.
• Monitor security tools and applications for possible malicious activity, investigate associated alerts or indicators, and develop recommendations for a course of action, including mitigation strategies as required.
• Document each event and its associated analysis in a ticketing system with clear, accurate technical writing so it can be reviewed and acted on appropriately.
• Maintain regular face-to-face interaction with the customer; handle issues when they are raised by the customer with little or no supervision.
• Positively influence team performance by improving CESO processes and procedures.
• Ensure system checks are performed in a timely manner and that documentation is complete and accurate.
• Assist senior analysts and/or managers with forecasting and modeling current threats.
• Develop a strong rapport with the customer and serve as a trustworthy network defense analyst.
• Collaborate with infrastructure, storage, database, and application teams to align network defense monitoring with CESO’s operational requirements as the program transitions to its secure cloud environment.

Basic Qualifications

• Bachelor’s degree and 2+ years of related experience; additional experience, education, or training may be considered in lieu of degree.
• Active TS/SCI security clearance required for this position.
• DoDD 8140 IAT Level II (or Level III) certification (e.g., Security+ CE).
• Strong computing systems knowledge with Windows, Red Hat, Cloud (AWS, Azure), and particularly networking, including communication protocols and familiarity with common security elements such as IDS/IPS systems and firewalls.
• Experience with implementing application/hardware security settings using vendor and DISA best business practices.
• Candidate may be asked to obtain a CI Polygraph in the future.

Preferred Qualifications

• Prior CND experience, ideally within a large enterprise or DoD/IC program environment.
• Experience monitoring intrusion detection and computer network defense appliances, applications, and analyzing associated alerts.
• Experience documenting analysis and providing response recommendations in a ticketing/case management system.
• Experience reviewing system logs manually and using automatic SIEMs tools (e.g., SPLUNK, Elastic) and performing network log analysis.
• Prior experience with DISA and DISA’s support to mission partners.
• An Understanding of disaster recovery and business continuity concepts as they apply to secure cloud migrations. If you are interested, please send an email to