Computer Network Defense Analyst

Career Listings; Columbus (OH); On-site; USD 90,000 - 120,000; Full time

Benefits offered by this job

401(k)

401(k) matching

Dental insurance

Health insurance

Paid time off

Profit sharing

Training & development

Tuition assistance

Vision insurance

Job summary

SarelaTech is seeking a Computer Network Defense (CND) Analyst to provide enterprise-level cyber defense support for the DLA CSSP. You will monitor, detect, and respond to cybersecurity events across government information systems and networks.

Join a 24x7 cybersecurity operations team focusing on threat hunting, malware analysis, incident reporting, and continuous process improvement to protect confidentiality, integrity, and availability of data and systems.

Qualifications

• Bachelor's degree or higher in Cybersecurity, IT, CS, or related field required.
• Five+ years supporting Cyber Network Defense (CND) or Defensive Cyber Operations.
• Two+ years incident investigation, root cause analysis, and log analysis.
• Experience with SIEM, IDS/IPS, packet analysis, threat intel, and monitoring tools.
• Strong knowledge of IR methodologies, malware analysis, threat hunting, and forensics.

Responsibilities

• Monitor, analyze, investigate, and respond to cybersecurity events across enterprise networks and data.
• Perform proactive threat hunting and analysis using SIEM, IDS/IPS, logs, and threat intel.
• Conduct incident triage, root cause analysis, containment, eradication, and post-incident reporting.
• Develop, tune, and maintain detection capabilities including SIEM rules and IDS/IPS signatures.
• Perform malware analysis and support forensic collection and analysis of digital evidence.
• Prepare incident reports, AARs, lessons learned, and operational metrics.
• Coordinate incident reporting with government stakeholders.
• Support readiness through tabletop exercises and security awareness training.

Skills

SIEM platforms

IDS/IPS

Incident Response

Threat Hunting

Digital Forensics

Packet Analysis

Threat Intelligence

PowerShell

Python

Bash

Communication skills

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related technical discipline

Tools

PowerShell

Python

Bash

Perl

Job description

Benefits

• 401(k)


• 401(k) matching


• Dental insurance


• Health insurance


• Paid time off


• Profit sharing


• Training & development


• Tuition assistance


• Vision insurance

SarelaTech is seeking a Computer Network Defense (CND) Analyst to support the Defense Logistics Agency (DLA) Enterprise Cyber Security Service Provider (CSSP). The selected candidate will provide enterprise-level cyber defense support for continuous monitoring, threat detection, incident response, and defensive cyber operations across government information systems and network infrastructure.

Working as part of a 24x7x365 cybersecurity operations team, the CND Analyst will identify, analyze, investigate, contain, and respond to cybersecurity events while supporting enterprise network defense, threat hunting, malware analysis, incident reporting, and continuous process improvement. The position supports the protection of government systems by maintaining the confidentiality, integrity, availability, and resilience of enterprise networks, applications, and data.

Primary Responsibilities

• Monitor, analyze, investigate, and respond to cybersecurity events, alerts, and incidents affecting enterprise networks, systems, applications, and data in accordance with established Incident Response procedures.


• Perform proactive threat hunting and cybersecurity analysis utilizing SIEM platforms, IDS/IPS, system logs, packet captures, forensic tools, and threat intelligence to identify malicious activity and emerging threats.


• Conduct incident triage, root cause analysis, containment, eradication, recovery, and post-incident reporting while ensuring compliance with established Standard Operating Procedures (SOPs) and Tactics, Techniques, and Procedures (TTPs).


• Develop, tune, and maintain cybersecurity detection capabilities, including SIEM correlation rules, IDS/IPS signatures, and other defensive security countermeasures.


• Perform malware analysis and support forensic collection, preservation, and analysis of digital evidence.


• Prepare incident reports, After Action Reports (AARs), lessons learned documentation, and operational metrics.


• Coordinate cybersecurity incident reporting, escalation, and notifications with government stakeholders.


• Support cybersecurity readiness through tabletop exercises, continuous process improvement, and cybersecurity awareness training.

Required Qualifications

• Top Secret security clearance with SCI eligibility.


• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or related technical discipline.


• Five (5) or more years supporting Cyber Network Defense (CND), SOC, Incident Response, or Defensive Cyber Operations.


• Two (2) or more years of performing incident investigation, root cause analysis, and network or system log analysis.


• Experience utilizing SIEM platforms, IDS/IPS technologies, packet analysis, threat intelligence, and cybersecurity monitoring tools.


• Strong understanding of Incident Response methodologies, malware analysis, threat hunting, digital forensics, and enterprise cyber defense principles.


• Strong written and verbal communication skills.

Desired Qualifications

• Experience supporting the Defense Logistics Agency (DLA), DISA, or other DoD organizations.


• Experience supporting Cyber Security Service Provider (CSSP), Security Operations Center (SOC), or Computer Emergency Response Team (CERT) operations.


• Knowledge of MITRE ATT&CK, NIST SP 800-61, NIST SP 800-53, DISA STIGs, and DoD cybersecurity policies.


• Experience developing SIEM correlation rules, IDS/IPS signatures, or enterprise detection capabilities.


• Experience with PowerShell, Python, Bash, Perl, or similar scripting.


• Experience participating in cybersecurity exercises and developing After Action Reports (AARs).


• Professional certifications such as Security+, CySA+, CEH, GCIH, GCFA, CISSP, or equivalent.

Preferred Skills

• Security Operations Center (SOC) operations


• Computer Network Defense (CND)


• Incident Response


• Threat Hunting


• SIEM administration and monitoring


• IDS/IPS analysis


• Malware Analysis


• Digital Forensics


• Packet Analysis


• Threat Intelligence


• PowerShell, Python, Bash


• Technical documentation and reporting


• NIST and DoD cybersecurity standards