Share Email Opening Title Computer Network Defense (CND) Analyst  Req Number INF-23-00055   Requisition Category Proposal   Full-Time/Part-Time Full-Time   Location Columbus, OH   Description Description: The Computer Network Defense (CND) Analyst will provide Cyber Security Support to the Defense Logistics Agency (DLA). Additional Responsibilities Include, but are not Limited To: Perform actions to protect, monitor, detect, analyze, and respond to unauthorized activity within assigned information systems and computer networks. Employ Cybersecurity capabilities and deliberate actions to respond to a CND alert or emerging situational awareness/threat. Serve as an expert on CND requirements and compliance to such requirements by using IA tools and techniques to perform compliance analysis and correlation, tracking and remediation, coordination, and escalating CND non-compliance. Provide technical analysis and sustainment support for the enterprise for IA tools and applications and assists with the application of Defense-In-Depth signatures and perimeter defense controls to diminish network threats. Perform monitoring of DLA’s cybersecurity tools, triage of all alerts as well as analysis and response of all cybersecurity incidents. Perform Threat Hunting to ensure proactive efforts are made to discover malicious activity and threats to DLA’s environment. Incident Detection and Analysis: Monitors cybersecurity tools for alerts and relevant dashboards for traces of system compromise. Initiates incident response actions. Correlates data from multiple sources to include host & network-based IDS & IPS, available log and packet capture data, data pulled by forensics tools, government & open-source intelligence. Assesses the scope of suspected or confirmed cyber incidents and takes immediate action to prevent the spread of the activity. Develops countermeasures such as custom SIEM and IDS rules/signatures to strengthen DLAs ability to prevent and detect attacks against DLA assets and data. Incident Response: Maintains an initial triage and response process for cybersecurity incidents. Ensures proper reporting to law enforcement and intelligence groups in the event of incidents involving classified data spillages, incidents involving cleared defense contractors or where suspected criminal activity has occurred. Works with DLA subscriber groups to identify operational or technical impact of an incident as well as the criticality of the system/data affected by the incident. Supports DLA PMO incident response processes. Coordination of countermeasure deployment Maintaining incident escalation procedures Maintaining point of contact for each subscriber Participating in annual Incident Response Tabletop exercises as requested Threat Hunting: Provides recommendations for hunting targets within DLA’s network environments. Uses tools defined in the Threat Hunting SOPs and TTPs to engage in Threat Hunting exercises at the direction of DLA CERT leadership. Identifies potential detection signatures to assist in identifying threats to DLA’s environment and implement them. Assist with proposal development, if necessary. Perform other duties, as assigned. Experience: Five (5) years of relevant experience or related formal education. Two (2) years of experience performing root cause analysis of cybersecurity events and incidents. Two (2) years of experience analyzing network traffic and/or system logs. Education: Bachelor’s degree preferred. Certificates, Licenses, Registrations: DOD Approved 8570/8140 Baseline Certification: Category IAT Level II required. DOD Approved 8570/8140 CSSP Certification: CSSP-IR required. Other Required Skills & Abilities: Must possess written and verbal skills to appropriately document and brief Cybersecurity Incidents. Working knowledge of at least two cybersecurity areas: Firewall IDS/IPS Host based antivirus Vulnerability Management Forensics Malware Analysis Device Hardening Understanding of Defense-in-Depth. Ability to build and read scripts in languages such as Perl, Bash, Powershell, Ruby, Python. Must be able to effectively communicate with customer and fulfill all duties and responsibilities as listed in the contract. Must be proficient in Microsoft Office suite including, but not limited to: Word, PowerPoint, Excel, and Outlook. Security Clearance: Top Secret security clearance required. Must be able to obtain a TS/SCI security clearance. US Citizenship: This position supports a U.S. Government Contract whose terms require Sawdey Solution Services to staff it only with U.S. Citizens.   About the Organization Sawdey Solution Services, an ISO 9001 certified and CMMI-SVC v2 Level 3 appraised corporation, has built a nationwide and global footprint as a leading government contracting organization. Specializing in cybersecurity, systems engineering, and operational support, Sawdey invites you to be a part of a team that's at the forefront of securing our nation. Operating successfully since 2001, we are a Woman Owned/Service-Disabled Veteran Owned Business. We provide our clients with premier professional services and technology solutions in an employee-centric environment. We are extremely proud of the culture we have created. Why Choose Us? Mission-Critical Work: We play a vital role in ensuring the security of our nation's digital infrastructure. Professional Growth: Embrace the opportunity to take on diverse and dynamic roles that challenge and inspire you. Collaborative Culture: You are joining a unified team where your unique contributions are valued and celebrated. Who We're Looking For: Hardworking Individuals: If you're someone who takes initiative, loves a challenge, and is committed to excellence, you'll feel right at home here. Talented Professionals: Whether you're an expert in your field or a rising star, we recognize your potential and support your effort toward success. Diverse Perspectives: Our strength lies in our diversity. We believe that a diverse team fosters creativity, innovation, and achievement.   EOE Statement We are a Disabled-Veterans-41 CFR 60 1.4, Equal Opportunity Employer. Devoted to creating a diverse and friendly workplace, we do not discriminate against any employee or applicant because of race, age, sex, color, physical or mental disability, religion, sexual orientation, gender identity, marital status, national origin, or veteran status. Our goals and beliefs are that diverse backgrounds and experiences empower and enable us to offer our customers an unmatched level of service. People of color, women, LGBTQIA+, veterans, and persons with disabilities are encouraged to apply!   This position is currently not accepting applications. To search for an open position, please go to http://SawdeySolutionServices.appone.com WE ALSO RECOMMEND Other Jobs Within Same Category Senior IT Support Technician in Remote, NH Posted on: 1/13/2025 [Apply Now] Senior System Administrator in Remote, USA Posted on: 12/17/2024 [Apply Now] LAN Engineer - Senior in Bremerton, WA Posted on: 11/18/2024 [Apply Now] Network Defense (CND) Analyst in Battle Creek, MI Posted on: 11/13/2024 [Apply Now] Network Defense (CND) Analyst in Fort Belvoir, VA Posted on: 11/13/2024 [Apply Now] Other Jobs Within 60 Miles Network Defense (CND) Analyst in Columbus, OH Posted on: 10/29/2024 [Apply Now] Follow us See who works here:

 

Click here for technical assistance.