Computer Network Defense, Lead

Anavationllc; Bethesda (MD); On-site; USD 120,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Disability insurance

Vision insurance

401k match

Paid leave

Tuition reimbursement

Life insurance

Job summary

AnaVation seeks a Cyber Security SME responsible for the overall security defense and monitoring of enterprise IT services across multiple security domains. This role includes responding to alerts, administering IPS/IDS tools, SIEM events, and incident response actions to strengthen the organization’s cyber posture.

Requires Active TS/SCI with CI Poly, 7+ years’ experience, and BA/BS in a related field; MS preferred.

Qualifications

• Minimum of 7 years related professional work experience.
• Minimum 5 years in CND and incident response.
• Experience managing IPS/IDS tools and ACAS scans.
• Experience using SIEM for incident response actions from alerts.

Responsibilities

• Respond to alerts from HBSS and other security tools.
• Administer security IPS/IDS tools and monitor enterprise environment.
• Generate reports on security posture, threat activity and risk to leadership.
• Lead defensive cyber operations and coordinate multi-platform CND activities.

Skills

CND and incident response

Threat reporting

Leadership

Mentoring junior analysts

Education

BA/BS in Computer Science or Cybersecurity

MS in Computer Science or Cybersecurity

Tools

HBSS

IPS/IDS tools

SIEM

ACAS scans

Tableau

CMDB

EDR

Job description

Be Challenged and Make a Difference

In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.

Description of Task to be Performed:

AnaVation is seeking a Cyber Security SME responsible for the overall security defense and monitoring of the enterprise environment of critical information technology services acrossmultiple security domains and delivery platforms. This includes, but is not limited to, responding to alerts fromHBSS, administering security IPS/IDS tools, addressing triggers and events from SIEM systems, responding toincident response events, and generating reports related to the state of network security and threat activity. Thisrole strengthens the defensive posture and cyber defense operational readiness of the customer’s enterprise toprotect against external cyber attacks and insider threats which could potentially cause damage to the data,systems, or networks.

• Clearance: Active TS/SCI with CI Poly
• Education: BA/BS in Computer Science, Cybersecurity, or another related field
• Certifications: DoD 8570 IAT Level III
• Location: Bethesda, MD
• Experience:
• Minimum of 7 years related professional work experience
• Minimum 5 years working in the fields of CND and incident response
• Experience managing IPS/IDS tools
• Experience conducting ACAS scans
• Experience conducting incident response actions from alerts on a SIEM
• Experience using Tableau to render data into summary reports
• Experience providing security posture, threat, and risk reports and briefings to leadership
• Support in the establishment and maintenance of the CMDB to ensure accurate tracking of assets and configurations. Provides support to an organization, system, or enclave’s information assurance program.
• Experience leading defensive cyber operations teams or coordinating multi-platform CND activities
• Ability to correlate and analyze security data across endpoint, network, and cloud environments to drive incident response decisions
• Experience developing or improving SOPs, playbooks, and workflows for CND and cyber incident response

• Clearance: Active TS/SCI with CI
• Poly Education: MS in Computer Science, Cybersecurity, or another related field Experience:
• 10+ years related professional work experience
• 7+ years working in the fields of CND, risk management, and continuous management of security tools
• Experience conducting cyber-attack analysis
• Experience conducting Battle Damage Assessments after a cyber-attack
• Experience detecting and mitigating insider threat
• Provides security certification test and evaluation of assets, vulnerability management and response, securityassessment, and customer support.
• Documenting network schemas and cyber operation tool solutions
• Experience briefing cyber risk, defensive posture, and operational priorities to senior leadership
• Familiarity with enterprise-level cyber defense architecture and integration across SIEM, IDS/IPS, EDR, andvulnerability management platforms
• Demonstrated ability to mentor junior analysts and guide technical teams during cyber incidents

Benefits

• Generous cost sharing for medical insurance for the employee and dependents
• 100% company paid dental insurance for employees and dependents
• 100% company paid long-term and short-term disability insurance
• 100% company paid vision insurance for employees and dependents
• 401k plan with generous match and 100% immediate vesting
• Competitive Pay
• Generous paid leave and holiday package
• Tuition and training reimbursement
• Life and AD&D Insurance

About AnaVation

AnaVation is the leader in solving the most complex technical challenges for collection and processing in the U.S. Federal Intelligence Community. We are a US owned company headquartered in Chantilly, Virginia. We deliver groundbreaking research with advanced software and systems engineering that provides an information advantage to contribute to the mission and operational success of our customers. We offer complex challenges, a top-notch work environment, and a world-class, collaborative team.

If you want to grow your career and make a difference while doing it, AnaVation is the perfect fit for you!

AnaVation is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law.