Cyber Network Defense (CND) Analyst

SAIC; Springfield (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

SAIC is seeking a Cyber Network Defense (CND) Analyst to join the MAJESTIC Joint Program Office (JPO) Team in support of an on-premises enterprise IT environment. All work must be performed on-site in Springfield, VA.

The role involves assessing systems and networks for configuration deviations, evaluating incident response capabilities, and leveraging findings to protect mission-critical infrastructure. Ideal candidates have 2–5 years in security audits or CND, familiarity with NIST RMF and

Qualifications

• 2-5 years of experience in security audits or CND functions in an enterprise IT environment.
• Proficiency with cybersecurity frameworks (e.g., NIST 800-53, RMF, ICD 503).
• Experience with CND tools: Splunk, Nessus, ACAS.

Responsibilities

• Perform assessments of systems and networks to identify deviations from policies and security standards.
• Evaluate incident response procedures to ensure readiness against cyber threats.
• Exploit vulnerabilities for data gathering to enable operations and intelligence collection.
• Review and validate system configurations and security controls for compliance and effectiveness.
• Maintain detailed documentation of investigations, findings, and remediation plans.

Job description

Description

SAIC isseekinga skilled and motivatedCyber Network Defense (CND) Analystto join ourMAJESTIC Joint Program Office (JPO) Teamin support of an on-premises enterprise IT environment. As part of a subcontract supporting a critical customer, the candidate will perform assessments of systems and networks toidentifydeviations from acceptable configurations, enclave policy, or local policy, while evaluating incident response procedures and capabilities. Responsibilities include exploiting system and network vulnerabilities to gather data from target systems. This role involves working within a complex environment of virtualized Windows and Linux servers, SQL Server databases, Oracle databases, and comprehensive networking layers to protect mission‑critical systems and infrastructure.

All work must be performedon-sitein Springfield, VA.

Key Responsibilities

• Perform assessments of systems and networks within the networking environment or enclave toidentifydeviations from acceptable configurations, policies, or security standards.
• Evaluate incident response procedures and capabilities to ensure readiness for detecting, responding to, and mitigating cyber threats.
• Exploit system and network vulnerabilities and misconfigurations for the purposes of gathering data from target systems or adversary networks to enable operations and intelligence collection capabilities.
• Leverage computer networks to disrupt, deny, degrade, or destroy information resident in computers and networks, or the computers and networks themselves.
• Identify, evaluate, and report cybersecurity vulnerabilities, providing actionable mitigation recommendations.
• Review andvalidate system configurations, changes, and security controls for compliance and effectiveness.
• Provide monitoring and analysis to detect signs of exploitation, unauthorized activity, or suspicious patterns.
• Maintain detailed documentation, including incident investigations, security findings, compliance reports, and remediation plans.
• Collaborate with stakeholders, such as Systems Administrators, Network Engineers, and Cybersecurity personnel, to assess and address risks effectively.

Qualifications

Education:

• High School Diploma/GED

Certifications (CWF Requirements):

• Candidates must satisfyCybersecurity Workforce Framework (CWF)ID 511 (Cyber Defense Analyst)or531 (Cyber Defense Auditor, Intermediate Level)requirements, as outlined by Navy COOL
  This requirement can be met bypossessingone or more of the following qualifyingcertifications:
• Certified Ethical Hacker (CEH/Practical)
• CompTIA Cloud+
• CompTIAPenTest+
• CompTIA Security+
• Federal IT Security Professional-Operator-NG (FITSP-O)
• GIAC Certified Enterprise Defender (GCED)
• GIAC Continuous Monitoring Certification (GMON)
• GIAC Defensible Security Architecture (GDSA)
• GIAC Response and Industrial Defense (GRID)
• GIAC Security Essentials Certification (GSEC)
• GIAC Certified Incident Handler (GCIH)
• GIAC Security Essentials Certification (GSEC)
• RochestonCertified Cybersecurity Engineer (RCCE) Level 1
• Certified Cloud Security Professional (CCSP)
• Cisco Certified Network Associate (CCNA) Cybersecurity (formerly Cisco Cybersecurity Associate)
• EC-Council Certified Incident Handler (ECIH)
• Federal IT Security Professional-Operator-NG (FITSP-O)

ORThis requirement can be met through:

• ABachelor’s Degreein Cybersecurity, Computer Science, IT, or a related field

Experience:

• 2-5 yearsof experienceperforming security audits, compliance assessments, or Cyber Network Defense-related (CND) functions in an enterprise IT environment

Technical Skills:

• Proficiencyin cybersecurity frameworks (e.g., NIST 800-53, RMF, ICD 503)
• Experience with CND tools and technologies (e.g., Splunk, Nessus, ACAS)
• Solid understanding of Windows/Linux security configurations and enterprise network concepts
• Familiarity with incident response procedures and database security for platforms like SQL Server and Oracle

Clearance Requirement:

• ActiveTS/SCIclearance with the ability to obtain andmaintainaTS/SCI with Poly

Work Environment and Notes:

• On-site Work:All work must be conducted on-site in Springfield, VA
• Program Scope:Supports on-premises enterprise IT environments, including virtualized Windows/Linux servers, databases, and comprehensive networking layers
• Subcontractor Role:Roles and responsibilities are defined per the subcontract agreement, with salary based on competitive market rates and role-specific requirements

Target salary range: $120,001 - $160,000. The estimate displayed represents the typical salary range for this position based on experience and other factors.