NOSC Cyber Analyst Junior

About the role

Peraton is seeking a NOSC Cyber Analyst Junior to support our customer onsite in Arlington, Va.

Responsibilities

• Cook up across the enterprise to ensure network security devices are being monitored and are receiving or generating alerts.
• Identify security risks and exposures, determine causes of security violations, and suggest procedures to halt future incidents and improve security.
• Perform network traffic analysis utilizing raw packet data, net flow, IDS, IPS and custom sensor output, as it pertains to the cyber security of communications networks.
• Device monitoring of Tiered alerts for all operational networks.
• Maintain documentation for processes and procedures.
• Create incident reports providing both high level and in-depth details for investigations.

Qualifications

• Requires a Top Secret clearance with SCI eligibility.
• Current DoD 8570 IAT Level II certification (CCNA Security, CySA+, CICSP, GSEC, Security+ CE, SSCP).
• Current DoD 8570 CSSP-Analyst certification. (CEH, CFR, CySA+, GCIA, GCIH, GICSP, SCYBER).
• Requires a BS and 2 years of experience; will consider 4 additional years relevant experience in lieu of BS degree.
• Requires minimum 2 years' experience in Incident Handling/Incident Response.
• Fundamental experience working with DoD / Government Leaders at all levels.
• Fundamental experience working CND duties (e.g., Protect, Defend, Respond, and Sustain).
• Fundamental computing system knowledge, particularly networking, including a knowledge of communication protocols and familiarity with common computing security elements such as IDS/IPS systems and firewalls.
• Knowledge of hacker tactics, techniques and procedures (TTP).
• Familiarity with computing security frameworks such as MITRE ATT&CK and Cyber Kill Chain.
• Fundamental experience monitoring intrusion detection and computer defense appliances (Splunk, Elastic), applications, and analysis of associated alerts.
• Fundamental knowledge of advanced threat actor tactics, techniques, and procedures (TTP).
• Fundamental knowledge of software exploits.
• Fundamental experience in analyzing packed and obfuscated code.
• Fundamental experience evaluating packet captures.
• Fundamental technical writing skills.
• Fundamental communication skills.
• Ability to support the team with investigations.