Cyber Network Defense Analyst III — Incident Response & Forensics

Solutions3 LLC; Arlington (VA); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Solutions³ LLC seeks a Cyber Network Defense Analyst to support front line DFIR and proactive hunting for threats. You will coordinate with government leads, analyze network activity, and collect artifacts on site to drive rapid remediation. Strong CND experience and DoD/IC familiarity are needed.

Responsibilities include interfacing with customers, assessing topologies for risky configurations, and applying defense-in-depth practices across critical networks and infrastructure.

Qualifications

• Experience with CND policies, procedures and regulations.
• Strong knowledge of TCP/IP and common network protocols.
• Experience analyzing network traffic with tools like Wireshark.
• Familiarity with MITRE ATT&CK framework and cyber threats.
• Proficient in using SIEMs (e.g., Splunk) for incident analysis.
• Understanding of network topologies (DMZs, WANs) and security controls.

Responsibilities

• Assist Government lead in coordinating incident response investigations.
• Interface with customers on-site during engagements.
• Determine actions in response to anomalous network activity.
• Assess topology and configurations to identify security concerns.
• Collect network artifacts (PCAP, domains, URIs) for mitigation.
• Analyze malicious activity to identify exploitation methods and impact.
• Support real-time CND incident handling and remediation efforts.

Skills

CND policies

TCP/IP

Wireshark

ATT&CK

Splunk/SIEM

DMZ/WAN knowledge

Education

Bachelor's in CS/Cyber Security/Engineering

HS with 7-9 years net investigations

Tools

PCAP analysis

Job description

Solutions³ LLC seeks a Cyber Network Defense Analyst to support front line DFIR and proactive hunting for threats. You will coordinate with government leads, analyze network activity, and collect artifacts on site to drive rapid remediation. Strong CND experience and DoD/IC familiarity are needed.

Responsibilities include interfacing with customers, assessing topologies for risky configurations, and applying defense-in-depth practices across critical networks and infrastructure.