Target Network Analyst

Location: Suffolk, VA | Position Type: Full-Time | Clearance: Secret

About the role

AERMOR is seeking a Target Network Analyst to join our team in Suffolk, VA. The ideal candidate will possess strong Windows Administration skills, exploit development, reverse engineering, red team capabilities and engineering experience.

Responsibilities

• Provide scientific analysis of electronic evidence of compromised systems to establish vulnerability exploits.
• Travel/deployment in response to compromised systems.
• Provide consultative, technical research and analytical support on information security trends, standards, concepts and solutions.
• Test and evaluation of new commercial and/or government developed network-based investigative tools.
• Provides network-engineering solutions of state-of-the-art technologies by conducting reverse engineering of new vulnerabilities and malicious code in order to build counterattack signatures against known and unknown threats.
• Perform in-depth forensic analysis of compromised systems to include identification of malicious code, methods of compromise and data extraction techniques.
• Tracks trends and performs network nodal analysis on the Navy infrastructure to determine security gaps and network configuration deficiencies.
• Correlate technical and trend analysis for distribution to CND community.
• Primary liaison with national level intelligence collection in support of Tier II CND intelligence requirements.
• Provide I&W, AS&W and CND measures using intelligence analysis to implement CND defense options for response to immediate hostile threats.
• Provide real-time response to network compromises; may need to work flexible schedule based on crisis operations or flyaway watch team.
• Research various open-source hacker techniques and vulnerability exploit forums.
• Provides consolidated executive summaries and detailed analysis technical briefings for tactical commanders.
• Provide and maintain offsite storage of tape backups.

Qualifications

• Experience as a Windows system administrator.
• CCNA Certification is preferred but not required.
• Experience utilizing and administering Linux-based operating systems.
• Experience with researching various cyber actors’ TTPs, organizational structures, capabilities, personas, and environments, and integrate findings into penetration tests or web risk assessment operations.
• Web Server configuration knowledge: Microsoft IIS, Apache HTTP Server, Apache Tomcat.
• Experience with executing technical cyber assessments or penetration tests.
• Experience with the utilization of testing methodology for cloud-based and networked systems.
• Experience with modification, testing and utilization of computer network attack and exploitation tools.
• Experience with Operational Risk Management (ORM) concepts and application.
• Software installation, upgrades, patches, and configuration support ensuring IA/C&A compliance.
• DNS and DHCP configuration, support, and maintenance.
• Group Policy configuration, support, and maintenance.
• Active Directory configuration, support, and maintenance.
• Proficient in the application of Secure Technical Implementation Guides (STIGs).
• Configuration and administration support for CTE network accounts.
• Subject matter expertise in the deployment and implementation of operating systems and application software.
• Ability to implement software, cyber assessment tools, information assurance products, or computer security applications (preferred).
• Experience with computer network or system design and implementation (preferred).
• Application support for various systems tools and utilities.
• Excellent oral and written communications skills.
• Able to work alone or in a small group to resolve tasks independently with minimal supervision.

Benefits

• Medical, dental, and vision insurance
• 401(k) plan
• Paid time off
• Professional development opportunities

Pay

Salary range