Network Forensics Cybersecurity ystsNetwork Based System ysts
Network Forensics Cybersecurity ystsNetwork Based System ysts
Employer Active
Job Alert
You will be updated with latest job alerts via email
Share
Job Alert
You will be updated with latest job alerts via email
5years
Not Disclosed
Salary Not Disclosed
1 Vacancy
Job Description
- Assists the Government lead in coordinating teams in preliminary incident response investigations
- Assists the Government lead with interfacing with the customer while onsite
- Determines appropriate courses of action in response to identified and analyses anomalous network activity
- Assesses network topology and device configurations identifying critical security concerns and providing security best practice recommendations
- Assists with the writing and publishing of Computer Network Defense guidance and reports on incident findings to appropriate constituencies
- Collects network intrusion artifacts (e.g. PCAP domains URIs certificates etc.) and uses discovered data to enable mitigation of potential Computer Network Defense incidents
- Analyzes identified malicious network activity to determine weaknesses exploited exploitation methods effects on system and information
- Assists with realtime CND incident handling (i.e. forensic collections intrusion correlation and tracking threat analysis and advising on system remediation) tasks to support onsite engagements
- Provide technical briefings as required.
Requirements
- U.S. Citizenship
- Must have an active TS/SCI clearance
- Must be able to obtain DHS Suitability
- 8 years of directly relevant experience in network investigations
- Indepth knowledge of CND policies procedures and regulations
- Indepth knowledge of standard protocols ICMP HTTP/S DNS SSH SMTP SMB NFS TCP/IP
- Indepth knowledge and experience of Wifi networking
- Indepth knowledge and experience of network topologies DMZs WANs etc.
- Substantial knowledge of Splunk (or other SIEM s)
- Understanding of MITRE Adversary Tactics Techniques and Common Knowledge (ATT&CK)
- Knowledge of Computer Network Defense policies procedures and regulations
- Knowledge of defenseindepth principles and general attack stages with respect to network security architecture
- Ability to characterize and analyze network traffic to identify anomalous activity and potential threats to network resources
- Ability to identify and analyze anomalies in network traffic using metadata
- Experience with reconstructing a malicious attack or activity based on network traffic
- Experience examining network topologies to understand data flows through the network
- Must be able to work collaboratively across physical locations.
- Substantial knowledge of network device integrity concepts and methodologies
- Proficiency with network analysis software (e.g. Wireshark)
- Proficiency with carving and extracting information from PCAP data
- Proficiency with nontraditional network traffic (e.g. Command and Control)
- Proficiency in preserving evidence integrity according to standard operating procedures or national standards
- Proficiency with virtualized environments
- DoD 8140.01 IAT Level II IASAE II CSSP Analyst GCIA GCIH CSSP Analyst/CSSP Incident Responder CEH
- SANS GIAC GNFA preferred
Company Overview:
Node. Digital is an independent Digital Automation & Cognitive Engineering company that integrates bestofbreed technologies to accelerate business impact.
Our Core Values help us in our mission. They include:
OUR CORE VALUES
Identifying theRIGHT PEOPLEand developing them to their full capabilities
Our customer s Mission is our Mission . OurMISSION FIRSTapproach is designed to keep our customers fully engaged while becoming their trusted partner
We believe inSIMPLIFYINGcomplex problems with a relentless focus on agile delivery excellence
Our mantra is Simple*Secure*Speed in the delivery of innovative services and solutions.
Benefits
We are proud to offer competitive compensation and benefits packages to include:
- Medical
- Dental
- Vision
- Basic Life
- LongTerm Disability
- Health Saving Account
- 401K
- Three weeks of PTO
- 10 Paid Holidays
- PreApproved Online Training
Employment Type
Full Time
