Cyber Defense Analyst - Part Time

Location: Amarillo, TX - Remote Job Title: Cyber Defense Analyst - Part Time Career Level From: Entry Staff Member Career Level To: Entry Staff Member Organization: Cyber Operations (51130640) Job Specialty: Cyber Security What You'll Do The Cyber Defense Analyst uses data collected from a variety of cyber defense tools (e.g., Intrusion Detection System (IDS) alerts, firewalls, network traffic logs) to analyze events that occur within Pantex’s networks for the purposes of mitigating threats. Job Functions Include Develop content for cyber defense tools Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources Coordinate with enterprise-wide cyber defense staff to validate network alerts Document and escalate incidents (including event's history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment Perform cyber defense trend analysis and reporting Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack Receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts Provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities Use cyber defense tools for continual monitoring and analysis of system activity to identify malicious activity Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information Examine network topologies to understand data flows through the network Reconstruct a malicious attack or activity based off network traffic Provide daily summary reports of network events and activity relevant to cyber defense practices Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected cyber incidents and articulate the event's history, status, and potential impact for further action in accordance with the organization's cyber incident response plan. Minimum Job Requirements Associate's degreeOR High school Diploma Department of Energy (DOE) Order 426.2A Requirements Not applicable. Preferred Job Requirements Ability to recognize and categorize types of vulnerabilities and associated attacksKnowledge of adversarial tactics, techniques, and proceduresKnowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusionsKnowledge of authentication, authorization, and access control methodsKnowledge of network access, identity, and access managementKnowledge of system and application security threats and vulnerabilitiesKnowledge of incident response and handling methodologiesKnowledge of Windows/Unix ports and servicesKnowledge of network protocols such as Transmission Control Protocol (TCP)/ Internet Protocol (IP), Dynamic Host Configuration, Domain Name System (DNS), and directory servicesKnowledge of the use of sub-netting toolsKnowledge of Virtual Private Network (VPN) securityKnowledge of Insider Threat investigations, reporting, investigative tools and laws/regulationsExperience using cyber defense, vulnerability assessment, and analysis tools, and familiarity with their capabilitiesExperience with network tools (e.g., ping, traceroute, nslookup)Relevant cybersecurity experience including Security Information and Event Management (SIEM) operations, event management and incident management experienceAbility to conduct vulnerability scans and recognize vulnerabilities in security systemsAbility to review logs to identify evidence of past intrusionsAbility to analyze malwareAbility to identify applications and operating systems of a network device based on network trafficAbility to perform packet-level analysisKnowledge of computer networking concepts and protocols, and network security methodologiesKnowledge of cyber threats and vulnerabilitiesKnowledge of information technology (IT) security principles and methods (e.g., firewalls, demilitarized zones, encryption)Knowledge of operating systemsKnowledge of network traffic analysis methodsKnowledge of the common attack vectors on the network layerStrong problem solving and communication skills (both orally and in writing) #JointheMission: Your Impact Starts Here At Pantex, you won't just find a job—you’ll discover a career of purpose safeguarding national security through work performed nowhere else on Earth. We empower dedicated, innovative individuals like you to achieve their greatest impact surrounded by exceptional talent and limitless opportunities for professional growth. When you #JointheMission, you choose a lifetime career where your commitment is genuinely valued and rewarded. At Pantex, we believe that extraordinary talent thrives when supported by a balanced life. Discover the flexibility that empowers you to excel, coupled with a benefits package designed for your total peace of mind from comprehensive health coverage and robust retirement planning, to opportunities for continuous learning through education reimbursement. Notes The minimum education and experience for the lowest career level in the job posting range are listed under Minimum Job Requirements. Successful candidates hired into a higher career level than the minimum in the range must meet the requirements listed in the job leveling charts for the career level into which they are being hired. If a range of Career Levels is posted, i.e., Senior Associate to Senior Specialist, internal applicants already in one of the Career Levels would come across at their current Career Level. Internal applicants currently in a lower level Career Level would move to the lowest posted Career Level. Requires a Q clearance; however all qualified candidates will be considered regardless of their current clearance status. The ability to obtain and maintain a Department of Energy Q clearance is required. Position may require entry into Materials Access Areas (MAA) and participation in the Human Reliability Program (HRP). If HRP is required, candidate must complete a counterintelligence-scope polygraph, pursuant to 10 Code of Federal Regulations (CFR) 709. Medical requirements may apply. Pantex is a drug-free workplace. Candidates accepting a job offer will be required to pass a pre-placement physical, drug screening and background investigation. As an employee, you may be required to receive and maintain a security clearance from the United States Department of Energy in order to meet eligibility requirements for access to sensitive information or matter. U.S. citizenship is a requirement for security clearance applicants. All employees are subject to random selection for drug testing without advance notification. Pantex is an equal opportunity employer, and does not tolerate discrimination in the terms and conditions of employment on the basis of race, color, sex, sexual orientation, pregnancy, age, religion, national origin, ancestry, genetic information, disability, veteran status, or other characteristic protected by law. Such terms and conditions of employment include, but are not limited to, hiring, training, promotion, discipline, compensation, benefits, and termination of employment. Pantex takes affirmative action to employ and advance in employment qualified individuals with disabilities and protected veterans; including disabled veterans, recently separated veterans, active-duty wartime, or campaign badge veterans, and Armed Forces service medal veterans. All employment decisions are based on business needs, job requirements, and individual qualifications.