Cyber Defense Analyst - Senior

Join to apply for the Cyber Defense Analyst - Senior role at ECS

16 hours ago Be among the first 25 applicants

Join to apply for the Cyber Defense Analyst - Senior role at ECS

Job Description
ECS is seeking a

This position is contingent upon additional funding.
ECS Federal is a rapidly growing information security and information technology company in Washington, DC. We are looking to hire a

Job Description
ECS is seeking a Cyber Defense Analyst - Senior to work in our Washington, DC office. Please Note: This position is contingent upon additional funding.
ECS Federal is a rapidly growing information security and information technology company in Washington, DC. We are looking to hire a Senior Cyber Defense Analyst to support a full range of cyber security services on a long-term contract in Washington DC . The position is full time/permanent and will support a US Government civilian agency. The position is available immediately upon finding a qualified candidate with the appropriate background clearance.
Job Requirements

• Strong written and verbal communication skills with excellent attention to detail
• Ability to interpret the information collected by network tools (e.g. Nslookup, Ping, and Traceroute).
• Ability to conduct independent analysis with minimal assistance on events generated by SIEM and individual security tools.
• Ability to create custom detection rules to query log data for indicators of compromise.
• Experience conducting security event analysis from beginning to end and determining root cause.
• Experience creating and reviewing standard operating procedures with minimal supervision and oversight.
• Ability to mentor junior personnel and provide guidance on analysis that may exceed the capabilities of junior analysts.
• Knowledge of host/network access control mechanisms (e.g., access control list, capabilities lists).
• Knowledge of vulnerability information dissemination sources (e.g., alerts, advisories, errata, and bulletins).
• Knowledge of incident response and handling methodologies.
• Knowledge of incident categories, incident responses, and timelines for responses.
• Knowledge of front-end collection systems, including traffic collection, filtering, and selection.
• Experience with system administration, network, and operating system hardening techniques.
• Knowledge of cyber defense and information security policies, procedures, and regulations.
• Knowledge of the common attack vectors on the network layer.
• Knowledge of different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks).
• In-depth understanding of cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored).
• Knowledge of various types of network communication (e.g., LAN, WAN, MAN, WLAN, WWAN).
• Knowledge of file extensions (e.g., .dll, .bat, .zip, .pcap, .gzip).
• Knowledge of front-end collection systems, including traffic collection, filtering, and selection
• Develop content for cyber defense tools.
• Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.
• Coordinate with enterprise-wide cyber defense staff to validate network alerts.
• Ensure that cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level.
• Document and escalate incidents (including event’s history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.
• Perform cyber defense trend analysis and reporting.
• Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack.
• Perform security reviews and identify security gaps in security architecture resulting in recommendations for inclusion in the risk mitigation strategy.
• Identify and analyze anomalies in network traffic using metadata.
• Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings).
• Validate intrusion detection system (IDS) alerts against network traffic using packet analysis tools.
  

*6+ years of relevant work experience required*
Salary Range: $107,000 - $120,000
Required Skills
General Description of Benefits

• Bachelors degree or higher
• 6+ years’ experience in Network/data analysis, packet capture analysis, malware detection, custom intrusion signature development, advanced information assurance
• Certifications addressing incident handling (identification, overview, and preparation) buffer overflow, client attacks, covering tacks (networks, systems), denial of service attaches, incident handing (containment, eradication, recovery, and lessons learned), network attacks, password attacks, reconnaissance, scanning (discovery and mapping, techniques and defense), session hijacking and cache poisoning, techniques for maintaining access, web applications attacks, worms, bots, and bot-nets
• Active TS/SCI clearance
  

Desired Skills

• Experience in detecting host and network based intrusions via intrusion detection technologies (e.g., Snort).
• Ability to analyze malware and conduct vulnerability scans and recognize vulnerabilities in security systems.
• Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.
• Experience evaluating the adequacy of security designs.
• Skill in using incident handling methodologies.
• Ability to apply techniques for detecting host and network-based intrusions using intrusion detection technologies.
• Experience with using protocol analyzers and collecting data from a variety of cyber defense resources.
• Experience reading and interpreting signatures (e.g., snort).
• Experience with assessing security controls based on cybersecurity principles and tenets. (e.g., CIS CSC, NIST SP 800-53, Cybersecurity Framework, etc.)
• Ability to accurately and completely source all data used in intelligence, assessment and/or planning products.
• Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
  

ECS is an equal opportunity employer and does not discriminate or allow discrimination on the basis any characteristic protected by law. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, or local jurisdiction law.
ECS is a leading mid-sized provider of technology services to the United States Federal Government. We are focused on people, values and purpose. Every day, our 3800+ employees focus on providing their technical talent to support the Federal Agencies and Departments of the US Government to serve, protect and defend the American People.

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Other, Information Technology, and Management

• Industries

  IT System Data Services

Referrals increase your chances of interviewing at ECS by 2x

Get notified about new Defense Analyst jobs in Washington, DC .

Washington, DC $90,000.00-$140,000.00 1 month ago

Senior Program Analyst - Foreign Military Sales

Program Analyst - Foreign Military Sales

Defense Trade Analyst IV (Dept. of State)

Suitland, MD $80,000.00-$100,000.00 1 month ago

Washington, DC $55,200.00-$126,000.00 2 weeks ago

Foreign Military Sales Senior Program Analyst

Arlington, VA $86,800.00-$198,000.00 1 month ago

Washington, DC $55,200.00-$126,000.00 2 weeks ago

Foreign Military Sales (FMS) Analyst - Mid-Level

Junior Engineer or Physical Scientist / Nuclear Analyst

Germantown, MD $105,000.00-$135,000.00 1 month ago

Arlington, VA $86,800.00-$198,000.00 1 week ago

Senior Defense Industry Analyst (Ground/ Land Arms Systems)

Defense Energy Resilience Analyst - Clearance Required

Foreign Military Sales Logistics Analyst, Mid

Senior Program Analyst – Foreign Military Sales

Acquisition Consultant/Management Analyst

Fort Meade, MD $100,000.00-$155,000.00 1 week ago

Senior Foreign Military Sales (FMS) Program Analyst (FMS Business Operations), F-35 JPO -(Hybrid Telework)

Annapolis Junction, MD $149,000.00-$177,000.00 3 weeks ago

Annapolis Junction, MD $98,000.00-$116,000.00 3 weeks ago

Acquisition Analyst (Senior) - Clearance Required

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.

#J-18808-Ljbffr