Senior Network Forensics Cybersecurity Analyst (TS/SCI)

ARSIEM; Arlington (TX); On-site; USD 140,000 - 170,000; Full time

Job summary

ARSIEM is seeking a Network Forensics Cybersecurity Analyst to support a government client in Arlington, VA. The role requires coordinating incident response activities, analyzing anomalous network activity, and interfacing with on-site personnel to deliver actionable recommendations.

The candidate will leverage abundant experience in network forensics, CND policies, and SIEM tools to reconstruct attacks, identify weaknesses, and provide threat intelligence to the client and project teams.

Qualifications

• BS in Computer Science, Cyber Security, Computer Engineering or related field; or HS Diploma with 10+ years of network investigations experience.
• 8+ years of directly relevant experience in network investigations.
• In-depth knowledge of CND policies, procedures, and regulations.
• In-depth knowledge of standard protocols – ICMP, HTTP/S, DNS, SSH, SMTP, SMB, NFS, TCP/IP.
• Substantial knowledge of Splunk (or other SIEMs).
• Understanding of MITRE ATT&CK.
• Knowledge of defense-in-depth principles and general attack stages with respect to network security architecture.

Responsibilities

• Assists the Government lead in coordinating teams in preliminary incident response investigations.
• Assists the Government lead with interfacing with the customer while on site.
• Determines appropriate courses of actions in response to identified and analyses anomalous network activity.
• Assesses network topology and device configurations identifying critical security concerns and providing security best practice recommendations.
• Assists with the writing and publishing of Computer Network Defense guidance and reports on incident findings.

Skills

Network investigations

CND knowledge

Splunk

Wireshark

Threat analysis

Network traffic analysis

Education

BS in Computer Science / Cyber Security / Computer Engineering

HS Diploma with 10+ years of experience

Tools

Splunk

Wireshark

Job description

ARSIEM is seeking a Network Forensics Cybersecurity Analyst to support a government client in Arlington, VA. The role requires coordinating incident response activities, analyzing anomalous network activity, and interfacing with on-site personnel to deliver actionable recommendations.

The candidate will leverage abundant experience in network forensics, CND policies, and SIEM tools to reconstruct attacks, identify weaknesses, and provide threat intelligence to the client and project teams.