Remote Cyber Network Defense Analyst & Incident Responder

bcmcllc; Arlington (VA); Hybrid; USD 110,000 - 170,000; Full time

Benefits offered by this job

Extremely competitive salary

Employer paid health, dental, & vision

Employer paid life, STD & LTD

401k with company match

FSA for dependents

Holiday & annual leave

Job summary

BCMC provides remote and onsite advanced cybersecurity support, including incident response and DFIR activities. We seek a CNDA to support this critical mission, with duties spanning coordination, data collection, threat analysis, and on-site remediation guidance.

Requirements include U.S. citizenship, TS/SCI clearance, and 5+ years in network investigations. DoD certifications and experience with SIEMs like Splunk are desirable. Relocation and travel may be involved.

Qualifications

• U.S. citizenship is required.
• Active TS/SCI clearance required.
• Ability to obtain DHS suitability.
• 5+ years of direct experience in network investigations.
• Deep knowledge of CND policies, procedures, and regulations.
• Strong understanding of TCP/IP protocols.
• Familiarity with common protocols (ICMP, HTTP/S, DNS, SSH, SMTP, SMB, NFS).
• Experience with wifi networking.
• Experience with network topologies (DMZs, WANs).
• Proficient with Splunk or similar SIEMs.
• Knowledge of MITRE ATT&CK framework.
• Understanding of defense-in-depth and attack stages in network security.
• Ability to analyze network traffic and identify anomalies.
• Experience reconstructing attacks from network data.
• Ability to work across physical locations.

Responsibilities

• Assist Government lead in coordinating incident response investigations.
• Interface with the customer on site as needed.
• Determine courses of action in response to network anomalies.
• Assess topology and configurations to identify security concerns.
• Collect intrusion artifacts (PCAP, domains, URI, certificates) for mitigation.
• Analyze malicious activity to identify exploitation methods and effects.
• Collect device integrity data to detect tampering.
• Support on-site real-time CND incident handling tasks.

Skills

Citizenship

TS/SCI clearance

DHS suitability

Experience in network investigations

CND policies & regulations

TCP/IP protocols

Common protocols (ICMP, HTTP/S, DNS, S

WiFi networking

Network topologies (DMZ, WAN)

Splunk/SIEM

MITRE ATT&CK knowledge

Defense-in-depth concepts

Analyze network traffic

Anomaly detection in traffic

Reconstructing attacks from traffic

Data flow analysis in networks

Collaborative work across locations

Education

BS in CS/Cyber Security/Computer Eng

HS Diploma + 7-9 years exp

Tools

Wireshark

Job description

BCMC provides remote and onsite advanced cybersecurity support, including incident response and DFIR activities. We seek a CNDA to support this critical mission, with duties spanning coordination, data collection, threat analysis, and on-site remediation guidance.

Requirements include U.S. citizenship, TS/SCI clearance, and 5+ years in network investigations. DoD certifications and experience with SIEMs like Splunk are desirable. Relocation and travel may be involved.