Senior Cyber Network Defense & Incident Response Analyst

NewGen Technologies; Arlington (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

NewGen Technologies seeks Cyber Network Defense Analysts to support national security missions with remote and on-site advanced technical assistance. The team handles DFIR, proactive hunting, incident response, and forensic data analysis to mitigate cyber threats.

Qualified candidates will have 5+ years in network investigations, deep CND knowledge, TCP/IP proficiency, and experience with SIEMs (Splunk) and Wireshark. U.S. citizenship and ability to obtain DHS suitability are required.

Qualifications

• Minimum 5+ years of directly relevant experience in network investigations.
• In-depth knowledge of CND policies, procedures and regulations.
• Strong understanding of TCP/IP and common protocols (HTTP/S, DNS, SSH, SMTP, SMB, NFS).
• Experience with network topologies (DMZs, WANs) and Wireshark.

Responsibilities

• Assist Government lead in coordinating teams during preliminary incident response investigations.
• Interface with the customer on-site as needed.
• Determine courses of action in response to anomalous network activity.
• Assess network topology and device configurations for security risks.
• Collect network intrusion artifacts (pcap, domains, URIs, certificates) for mitigation.
• Analyze malicious activity to identify exploitation methods and effects.
• Collect device integrity data and check for tampering.
• Support real-time CND incident handling (forensics, correlation, remediation).

Skills

Network investigations

CND knowledge

MITRE ATT&CK

Wireshark

Team collaboration

Education

BS in CS/Cyber Security/CE or related (or HS Diploma with 7-9 yrs exp)

Tools

Splunk

TCP/IP analysis

Job description

NewGen Technologies seeks Cyber Network Defense Analysts to support national security missions with remote and on-site advanced technical assistance. The team handles DFIR, proactive hunting, incident response, and forensic data analysis to mitigate cyber threats.

Qualified candidates will have 5+ years in network investigations, deep CND knowledge, TCP/IP proficiency, and experience with SIEMs (Splunk) and Wireshark. U.S. citizenship and ability to obtain DHS suitability are required.