Network Security Researcher (Early Career)

Military, Veterans and Diverse Job Seekers; Stafford (VA); Vor Ort; USD 80.000 - 110.000; Vollzeit

Zusammenfassung

Military, Veterans and Diverse Job Seekers is seeking a Network Security Researcher (Early Career) to join a project team focused on lab-based simulations of network architectures for troubleshooting and root cause analysis. You will support detection techniques and explore APT techniques for network movement, C2, and data exfiltration.

The role requires hands-on experience with Cisco/Juniper/Palo Alto equipment, familiarity with intrusion detection systems, and the ability to communicate

Qualifikationen

• Bachelor's degree in Computer Science or a related field
• Hands-on experience designing and implementing network designs with Cisco, Juniper, and Palo Alto equipment
• Familiarity with APT techniques
• Understanding of networking and security concepts (TCP/IP stack, routing, firewalls, IDS/IPS)
• Familiarity with IP networking concepts (QoS) and VPNs
• Ability to capture and analyze large amounts of network traffic
• Ability to communicate technical concepts to teammates
• Ability to obtain and maintain a Top Secret security clearance
• Travel may be frequent (two weeks every two months)

Aufgaben

• Implement architectures to simulate network architectures in a lab environment for troubleshooting and root cause analysis of misconfigurations and anomalies
• Support analysis and result validation of detection techniques and mitigations of anomalous behaviors
• Research techniques used by advanced threats to enable movement, C2, and data exfiltration on targeted networks
• Assist in determining which adversarial techniques network controls would block
• Support simulating remaining techniques in a lab and collect data for detection development
• Research trends in networking tech like SDN and NFV
• Design experiments to analyze impacts of these technologies on networks and document results
• Develop APT detection approaches using rule-based and ML methodologies
• Provide informal technical briefings on testing or experimental results

Kenntnisse

APT techniques

Networking concepts

Communication

Top Secret clearance readiness

Traffic analysis

Ausbildung

Bachelor's degree in Computer Science or related field

Tools

Cisco

Juniper

Palo Alto equipment

tcpdump

Wireshark

Snort

Suricata

Zeek

TensorFlow/Keras

Python 3.x

C11 / C++11

Jobbeschreibung

Network Security Researcher (Early Career)

About the job Network Security Researcher (Early Career)

Responsibilities

• As part of a project team, implement architectures to simulate and/or emulate portions of various network architectures in a lab-based environment for troubleshooting and root cause analysis of misconfigurations and anomalous behaviors.
• Support analysis and result validation of the detection techniques and mitigations of anomalous behaviors.
• Research techniques used by Advanced Persistent Threats (APT) that would enable movement through, Command and Control (C2) of, and data exfiltration on a targeted network.
• Assist in determining which adversarial techniques network security controls and policies would block.
• Support simulating remaining techniques in a lab and collect data to help develop detection approaches.
• Research emerging trends in networking technology such as Software Defined Networking (SDN) and Network Function Virtualization (NFV).
• Design and develop experiments to analyze the potential impacts these technologies would have on networks and document the results.
• Assist in the development of APT detection approaches using rule-based and Machine Learning (ML) methodologies.
• Provide informal technical briefings on testing or experimental results to team members.
  

Key Qualifications

• Bachelor's degree in Computer Science or a related field and networking experience.
• Hands on experience with designing and implementing network designs with Cisco, Juniper, and Palo-Alto equipment.
• Familiarity with APT techniques.
• Understanding of networking and security concepts (e.g., TCP/IP stack, routing, firewalls, intrusion detection systems, intrusion prevention systems).
• Familiarity with IP networking concepts (e.g., Quality of Service) and virtual private networks.
• Ability to capture and analyze large amounts of network traffic.
• Ability to communicate technical concepts to teammates.
• Ability to obtain and maintain a Top Secret security clearance
• Travel may be a frequent as two weeks every two months.

Preferred Qualifications

• Experience with Linux, Microsoft Windows desktop and Server, as well as virtualization environments like VMware ESXi/vSphere.
• Familiarity with data science techniques.
• Hands on experience with packet capture utilities like tcp dump and Wire Shark as well as Network Intrusion Detection (NIDs) like Snort, Suricata, and Zeek.
• Familiarity with Python 3.x and Python libraries for machine learning such as TensorFlow and Keras.
• Familiarity with C11 and C++ 11 or later.
• Experience with behavioral models like MITREs ATT&CK, Lockheed Martins Cyber Kill Chain that describe Advanced Persistent Threats (APT) tactics and techniques.