Target Analyst Reporter with Security Clearance

2HB Incorporated; Maryland; On-site; USD 120,000 - 180,000; Full time

Job summary

2HB Incorporated seeks a Target Analyst Reporter in Annapolis Junction, MD for a full-time role requiring a TS/SCI/Full Scope Polygraph Clearance. You will support a government customer with advanced cyber analysis, incident response, and exploitation development across Windows, UNIX, and mobile platforms.

Qualifications include multiple domains of expertise: offense/defense in networks, tools like IDA Pro, Snort, tcpdump, and Wireshark, plus deep memory analysis and reverse engineering

Qualifications

• Seven or more years of experience in two or more of listed cyber operations and engineering domains.
• Experience across computer network exploitation, vulnerability assessment, and incident response.
• Proficiency with intrusion detection and network forensics tools; capable of developing exploits for Windows, UNIX, and mobile OS.

Skills

Computer Network Exploitation

Vulnerability Assessment

Penetration Testing

Incident Response

Network Forensics

Cryptoanalytic Work

Cryptology in IC

File Hashing and Fuzzy File

Hashing Tools

Intrusion Detection Tools

Packet Capture

Network Mapping

Exploitation Development (Windows)

Exploitation Development (UNIX)

Mobile OS Exploitation

Software Reverse Engineering

Code Memory Analysis

IPv6 Networking

Tools

IDA Pro

Snort

BroIDS

tcpdump

Wireshark

NOSEHAIR

nmap

TRICKLER

Netcat

Netstat

Traceroute

Sysinternals suite

Job description

Target Analyst Reporter

Annapolis Junction, MD This is a full-time position, and requires a TS/SCI/Full Scope Polygraph Clearance. 2HB Incorporated is seeking a Target Analyst Reporter in order to support its government customer in Annapolis Junction, MD.

Annapolis Junction, MD This is a full-time position, and requires a TS/SCI/Full Scope Polygraph Clearance. 2HB Incorporated is seeking a Target Analyst Reporter in order to support its government customer in Annapolis Junction, MD.

Qualifications

• At least seven (7) years experience in two (2) or more of the following (see “LCAT Substitutes” Education for substitutes to this requirement for a total of four [4] years only):
• Computer Network Exploitation
• Vulnerability Assessment
• Penetration Testing
• Incident Response
• Network and/or server forensics
• Cryptoanalytic work in military or intelligence community organization
• Cryptology in military or intelligence community organization
• At least one (1) year of experience in two (2) or more of the following:
• File Hashing and Fuzzy File
• Hashing (e.g., ssdeep, fciv, and md5deep)
• Commercial, open source or GOTS tools for intrusion detection (e.g., Snort, BroIDS)
• Packet capture/evaluation (e.g., tcpdump, ethereal/wireshark, NOSEHAIR)
• Network mapping/discovery (e.g.,nmap, TRICKLER)
• Industry standard system/network tools (e.g., netcat, netstat, traceroute, rpcinfo, nbtscan, snmpwalk, Sysinternals suite)
• At least two (2) years of experience in one (1) or more of the following:
• Development of exploits for Microsoft Windows operating systems
• Development of exploits for UNIX operating systems
• Development of exploits for personal computer device/mobile device operating systems (e.g., Android, Blackberry, iPhone, and iPad)
• Software Reverse Engineering to include use of code disassemblers (e.g., IDA Pro) and debugging unknown code (e.g. Ollydbg)
• Analysis of code in memory, including analysis of RAM snapshots, Windows crash dump files, and/or UNIX kernel dumps
• Implementing networks with IPv6 protocols This is a full-time position, and requires a TS/SCI/Full Scope Polygraph Clearance.