Cyber Defense Analyst 3

The Swift Group, LLC; Maryland; On-site; USD 50,000 - 290,000; Full time

Benefits offered by this job

Healthcare benefits

Retirement planning options

Time off benefits

Job summary

The Swift Group, LLC is seeking a Cyber Defense Analyst 3 in Annapolis Junction, MD. You will monitor, analyze, and triage anomalous activity using cyber defense tools and generate cybersecurity cases with impact assessments.

The role requires eight years of CDA experience, SIEM and network analysis skills, and active TS/SCI with Polygraph clearance. Equal opportunity employer with comprehensive benefits and a focus on mission success.

Qualifications

• Eight years of CDA experience in programs/contracts of similar scope.
• Bachelor's degree may substitute for two years of CDA experience.
• Two years of TCP/IP fundamentals experience.
• Two years of tcpdump or Wireshark experience.
• Three years of SIEM experience (Splunk/ArcSight/Kibana/LogRhythm).
• Three years of network/threat analysis software experience.
• CSSP Analyst baseline certification (e.g., CEH, CySA+, CFR).
• IAT Level I or II certification; CE for supported systems; GIAC or GCIH.
• US citizenship with active TS/SCI clearance with Polygraph.

Responsibilities

• Use cyber defense tools to monitor, detect, analyze, triage anomalous activity.
• Generate cybersecurity cases with history, status, and potential impact.
• Perform advanced manual threat hunting to identify unknown threats.
• Identify attack phases based on vectors, models, and protocols.
• Apply host- and network-based intrusion detection techniques.
• Analyze malicious activity to determine exploits and effects.
• Correlate events to gain situational awareness and assess attack effectiveness.
• Lead and mentor team members as a technical expert.

Skills

TCP/IP fundamentals

tcpdump/Wireshark

Network analysis

Threat analysis software

Education

Bachelor's degree in a related field

Tools

Splunk

ArcSight

Kibana

LogRhythm

Job description

Swift is a privately held, mission-driven and employee-focused services and solutions company headquartered in Reston, VA. Our capabilities include Software Development, Engineering & IT, Data Science, Cyber Enablement, Logistics, and Training. Founded in 2019, Swift supports Civilian, Defense, and Intelligence Community customers across the country and around the globe.

We are looking for a Cyber Defense Analyst 3 to join a growing team in Annapolis Junction, MD.

Responsibilities

• Use cyber defense tools to monitor, detect, analyze, categorize, and perform initial triage of anomalous activity.
• Generate cybersecurity cases (including event’s history, status, and potential impact for further action) and route as appropriate.
• Perform advanced manual analysis to hunt previously unidentified threats.
• Identify cyber‑attack phases based on knowledge of common attack vectors and network layers, models and protocols.
• Apply techniques for detecting host‑and network‑based intrusions.
• Analyze malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information.
• Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack.
• Possess deep knowledge of active directory abuse used by attackers for lateral movement and persistence.
• Perform after‑action reviews of team products to ensure completion of analysis.
• Lead and mentor team members as a technical expert.

Requirements

• Eight (8) years of demonstrated experience as a CDA in programs and contracts of similar scope, type, and complexity.
• A technical bachelor’s degree from an accredited college or university may be substituted for two (2) years of CDA experience.
• Two (2) years of demonstrated and practical experience in TCP/IP fundamentals.
• Two (2) years of demonstrated experience with tcpdump or Wireshark.
• Three (3) years of demonstrated experience using security information and event management suites (such as Splunk, ArcSight, Kibana, LogRhythm).
• Three (3) years of demonstrated experience in network analysis and threat analysis software utilization.
• CSSP Analyst baseline certification (e.g., CEH, CySA+, CFR, etc.)
• IAT Level I or II certification
• Computing Environment (CE) certification for supported systems
• Global Information Assurances Certificate (GIAC) OR Global Certified Incident Handler (GCIH)
• US citizenship and an active TS/SCI with Polygraph security clearance required

The Swift Group and Subsidiaries are an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.

Pay Range: $49,996.80 - $290,004.00

Pay ranges are a general guideline and not intended as a guaranteed and/or implied final compensation or salary for this job opening. Determination of official compensation or salary relies on several different factors including, but not limited to: level of position, complexity of job responsibilities, geographic location, work experience, education, certifications, Federal Government contract labor categories, and contract wage rates.

At The Swift Group and Subsidiaries, you will receive comprehensive benefits including but not limited to: healthcare, wellness, financial, retirement, education, and time off benefits.