Cyber Network Defense Analyst - Remote/Onsite IR

BCMC; Arlington (VA); Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive salary

Employer-paid health coverage

401k with company match

Flexible Spending Account

Job summary

BCMC is seeking Cyber Network Defense Analysts (CNDA) to support federal missions with a mix of remote and on-site duties. You will assist government leads, coordinate incident response activities, and analyze network activity to prevent breaches.

The role requires active TS/SCI clearance, DoD/industry certifications, and deep knowledge of CND, TCP/IP, and SIEM tools like Splunk. Collaboration across locations is essential for success.

Qualifications

• Active TS/SCI clearance required; U.S. citizenship.

Responsibilities

• Coordinate with Government lead in preliminary incident response investigations.
• Interface with the customer while on site and relay findings.
• Determine actions in response to identified anomalous network activity.
• Assess network topology and device configurations for security concerns and best practices.
• Collect intrusion artifacts (PCAP, domains, URIs, certificates) to enable mitigation.
• Analyze malicious network activity to identify exploitation methods and effects.
• Collect network device integrity data to detect tampering or compromise.
• Support real-time CND incident handling (forensics, intrusion correlation, remediation) on onsite engagements.

Skills

Active TS/SCI clearance

DHS Suitability

5+ years in network investigations

CND policies & regulations

TCP/IP protocols

Common network protocols (ICMP, HTTP/S

WiFi networking

Network topologies (DMZ, WAN)

Splunk / SIEM

MITRE ATT&CK

Defense-in-depth principles

Network traffic analysis

Anomaly detection in traffic (metadata

Malware/attack reconstruction from pC

Network topology data flow analysis

Collaborative work across locations

Education

BS Computer Science, Cyber Security, Computer Engineering

Tools

Wireshark

Job description

BCMC is seeking Cyber Network Defense Analysts (CNDA) to support federal missions with a mix of remote and on-site duties. You will assist government leads, coordinate incident response activities, and analyze network activity to prevent breaches.

The role requires active TS/SCI clearance, DoD/industry certifications, and deep knowledge of CND, TCP/IP, and SIEM tools like Splunk. Collaboration across locations is essential for success.