Cyber Network Analysis Tech Junior/Mid level

Cyber Network Analysis Tech Junior/Mid level

Performs cyber security assessments of systems and networks within the networking environment or enclave and identifies systems that deviate from acceptable configurations, enclave policy, or local policy. Evaluates incident response procedures and capabilities. Exploits system and network vulnerabilities and misconfigurations for purposes of gathering data from target or adversary automated information systems or networks and to enable operations and intelligence collection capabilities. Leverages computer networks to disrupt, deny, degrade, or destroy information resident in computers and computer networks, or the computers and networks themselves.

• Security Tool Configuration: Configures, maintains, and optimizes security tools such as intrusion detection systems (IDS), intrusion prevention systems (IPS), firewall rules, antivirus, and SIEM solutions to effectively detect and mitigate security threats.
• Capability Deployment: Collaborates with cross-functional teams to design and implement new security capabilities.
• Security Procedure Development: Develops and documents security procedures, incident response plans, and playbooks to guide SOC team members in handling security incidents and events effectively.
• Incident Response: Participates in incident response activities, including analyzing and containing security incidents, performing forensics analysis, and assisting with post-incident reviews.
• Vulnerability Management: Identifies, prioritizes, and remediates security vulnerabilities across the organization's infrastructure and applications.
• Threat Intelligence: Stays up-to-date with the latest cybersecurity threats and trends and integrates threat intelligence into SOC operations.
• Security Compliance: Ensures compliance with regulations and standards and conducts security assessments as needed.
• Documentation: Maintains detailed records of security configurations, incidents, and procedures to support audits and reporting.

Minimum Qualifications

• Cyber Network Analysis Tech 2 – 2 years relevant experience with Bachelors in related field; or High School Diploma or equivalent and 6 years relevant experience.
• Cyber Network Analysis Tech 3 – 5 years relevant experience with Bachelors in related field; or High School Diploma or equivalent and 9 years relevant experience.
• - Security+ certification
• - Proficiency in configuring and managing security tools and technologies, such as firewalls, IDS/IPS, SIEM, and antivirus solutions.
• - Strong understanding of security frameworks, industry standards, and best practices.
• - Knowledge of programming/scripting languages (e.g., Python, Bash) for automation and scripting tasks.
• - Excellent communication and teamwork skills to collaborate effectively with cross-functional teams.
• - Ability to analyze and respond to security incidents swiftly and effectively.
• - Knowledge of network and systems administration.
• - Familiarity with cloud security principles and practices.
• - Attention to detail and strong problem-solving skills.
• - Active TS/SCI security clearance.

Preferred Requirements

• Higher-level cybersecurity certifications (such as CISSP or equivalent) strongly desired.