Target Digital Network Analyst (TDNA)

Lentech, Inc; Linthicum (MD); On-site; USD 110,000 - 165,000; Full time

Job summary

Lentech, Inc seeks a Target Digital Network Analyst (TDNA) in Maryland to conduct advanced cross-domain analysis, profiling targets and developing techniques to gain more information. The role blends research with intelligence reports and briefings for senior leadership.

Responsibilities include network/host analysis, vulnerability assessment, and open-source data collection. Expect travel for cyber tabletop exercises and ongoing collaboration with defense initiatives.

Qualifications

• Bachelor’s degree in a STEM field preferred; may substitute four years of relevant experience.
• Experience in vulnerability assessment, penetration testing, and network/host forensics.
• Familiarity with DNI/DNR reporting and open-source intelligence analyses.

Responsibilities

• Write intelligence reports and briefing materials for senior leadership.
• Support vulnerability discovery and mitigation efforts of national defense platforms.
• Travel to cyber tabletop exercises (CTTXs) as required.
• Develop and maintain target profiles and databases for tasking and analysis.

Skills

Vulnerability Assessment

Penetration Testing

Network Forensics

Host Forensics

Cryptanalytic Work

Cryptology

DNI/DNR Analysis

Open-Source Data Analysis

Target Profiling

Intelligence Reporting

Tabletop Exercises

Education

Bachelor's in STEM

Tools

Snort

BroIDS

tcpdump

Wireshark

nmap

TRICKLER

Netstat

Sysinternals Suite

IDA Pro

OllyDbg

Job description

• Conducts advanced analysis of SIGINT collection, pen source data, network data, and host data to ensure target continuity, to profile targets and their activities, and develop techniques to gain more target information.


• Provide expert analytic support at both network and host level to identify and characterize anomalies on USG networks.


• Possesses knowledge of target technologies and applies skills and knowledge of digital networks and the applications on them to determine how targets communicate, move, operate, and live.


• Applies analytic techniques to review relevant 'content carried in target communications.


• Applies geospatial analysis techniques against network packet information, computer OS system data, executable file data, host data, and metadata collected from tasked communications systems in order to identify anomalies, locate and track targets, and to accurately report the intelligence gained from the analysis to characterize anomalies on USG networks.


• The Target Digital Network Analyst (TDNA) is familiar with network-based adversary tactics, techniques, and procedures, network protocols, and common cyber vulnerabilities.


• This position will combine expert level research with analyzed intelligence community assessments and reports and open-source intelligence to support vulnerability discovery and mitigation efforts of United States National Defense platforms and Critical Infrastructure.


• This support includes writing intelligence reports, briefing and informing senior leadership, and traveling to cyber tabletop exercises (CTTXs)

Required:

• ACTIVE AND CURRENTTS.SCI with FSP through MD


• CI poly under 6 years.


• 5+ YOE in two (2) or more of the following areas:


• Vulnerability Assessment


• Penetration Testing


• Network and/or host forensics


• Cryptanalytic work in military or intelligence community organization


• Cryptology work in military or intelligence community organization


• Experience in analyzing DNI and DNR information for intelligence reporting.


• Proficiency in conducting sustained target analysis and utilizing advanced analytic techniques.


• Ability to build and maintain target profiles and relevant databases for targeting, tasking, and analysis.


• Strong skills in evaluating intelligence to identify gaps and tailor collection efforts.


• Familiarity with open-source data and collection analysis.


• Knowledge of relevant databases and tools for targeting and analysis.


• Minimum three (3) years’ experience in three (3) or more of the following areas:


• Analysis of host data at rest, including:


• Microsoft Windows operating systems, system internals, file attributes


• Executable file analysis (particularly PE files including dynamic linked libraries)


• File Hashing and Fuzzy File Hashing (e.g., ssdeep, fciv, and md5deep)


• Forensic analysis of Windows systems, Linux systems, and/or mobile devices


• Commercial, open source of GOTS tools for intrusion detection (e.g., Snort, BroIDS)


• Packet capture/evaluation (e.g, tcpdump, ethereal/wireshark, NOSEHAIR)


• Network mapping/discovery (e.g., nmap, TRICKLER)


• Industry standard system/network tools (e.g., netcat, netstat, traceroute, rpcinfo, nbtscan, snmpwalk, Sysinternals suite)


• Exploit development of Microsoft Windows operating systems


• Exploit development of personal computer device/mobile device operating systems (e.g., Android, Blackberry, iPhone, and iPad)


• Software Reverse Engineering to include use of code disassemblers (e.g., IDA Pro) and debugging unknown code (e.g., Ollydbg)


• Analysis of code in memory, including analysis of RAM snapshots, Windows crash dump files, and/or Linux kernel dumps


• SID(S2)/NTOC analysis and production working cyber adversary intrusion set/targets, foreign network intelligence analysis or the identification and extraction of digitally transported information.

Education:

• Bachelor’s degree in a STEM field preferred; may substitute four (4) years of relevant experience: