Cyber Defense Analyst 2

the-swift-group; Maryland; On-site; USD 110,000 - 140,000; Full time

Job summary

Swift is seeking a Cyber Defense Analyst 2 to join a growing team in Annapolis Junction, MD. The role performs advanced network monitoring, threat analysis, and intrusion detection in support of enterprise defense operations.

Requirements include four years of CDA experience (or a two-year substitution with a technical bachelor's degree), TCP/IP fundamentals, experience with Wireshark/tcpdump, SIEM (Splunk/ArcSight/Kibana), cloud experience (Azure/AWS), DoD 8570 CSSP Analyst baseline, DoD 8570

Qualifications

• Four years of CDA experience in similar scope.
• 1 year TCP/IP fundamentals.
• 1 year experience with network traffic analysis tools (Wireshark, tcpdump).
• 2 years SIEM experience (Splunk, ArcSight, Kibana).
• 2 years network and threat analysis experience.
• Splunk Fundamentals I course completion.
• DoD 8570 CSSP Analyst baseline certification.
• DoD 8570 IAT Level I or II.
• CE certification.
• 2 years maintaining or managing cloud environments (Azure, AWS).
• US citizenship and an active TS/SCI with Polygraph security clearance required.

Responsibilities

• Perform advanced manual threat hunting.
• Conduct PCAP and packet-level analysis.
• Perform network traffic, protocol, and netflow analysis.
• Analyze malicious activity and identify exploited weaknesses.
• Correlate enterprise security events for situational awareness.
• Understand IDS/IPS tuning and Snort filters.
• Identify Command and Control (C2) indicators.
• Detect host- and network-based intrusions.

Skills

TCP/IP fundamentals

Wireshark

tcpdump

SIEM

Splunk

ArcSight

Kibana

Network analysis

Threat analysis

Education

Bachelor's degree (technical)

Tools

Wireshark

tcpdump

Splunk

ArcSight

Kibana

Job description

Swift is a privately held, mission-driven and employee-focused services and solutions company headquartered in Reston, VA. Our capabilities include Software Development, Engineering & IT, Data Science, Cyber Enablement, Logistics, and Training. Founded in 2019, Swift supports Civilian, Defense, and Intelligence Community customers across the country and around the globe.

We are looking for a Cyber Defense Analyst 2to join agrowing team in Annapolis Junction, MD.

The Cyber Defense Analyst (Level 2) performs advanced network monitoring, threat analysis, and intrusion detection in support of enterprise defense operations.

Responsibilities:

• Perform advanced manual threat hunting
• Conduct PCAP and packet-level analysis
• Perform network traffic, protocol, and netflow analysis
• Analyze malicious activity and identify exploited weaknesses
• Correlate enterprise security events for situational awareness
• Understand IDS/IPS tuning and Snort filters
• Identify Command and Control (C2) indicators
• Detect host- and network-based intrusions

Requirements:

• Four (4) years of demonstrated experience as a Cyber Defense Analyst in programs and contracts of similar scope, type, and complexity is required. A technical bachelor’s degree from an accredited college or university may be substituted for two (2) years of CDA experience.
• 1 year TCP/IP fundamentals
• 1 year experience with network traffic analysis tools (e.g., Wireshark, tcpdump)
• 2 years SIEM experience (e.g., Splunk, ArcSight, Kibana)
• 2 years network and threat analysis experience
• Splunk “Fundamentals I” course completion
• DoD 8570 CSSP Analyst baseline certification
• DoD 8570 IAT Level I or II
• CE certification
• 2 years maintaining or managing cloud environments (Azure, AWS)
• US citizenship and an active TS/SCI with Polygraph security clearance required