Target Network Analyst at AERMOR LLC Suffolk, VA

Comunidade Metodista; Suffolk (VA); On-site; USD 110,000 - 150,000; Full time

Job summary

AERMOR LLC in Suffolk, VA seeks a Target Network Analyst (SME IV) with strong Windows administration, exploit development, and red team capabilities to join our security team.

The role focuses on forensic analysis of compromised systems, development of countermeasure signatures, and liaison with national-level intelligence to support CND operations. Travel may be required; a Secret clearance is expected; full-time on-site position.

Qualifications

• 7+ years of Windows system administration experience.
• 5+ years’ experience in exploit development and reverse engineering.
• Experience with red team operations and information security principles.

Responsibilities

• Provide scientific analysis of electronic evidence of compromised systems to establish vulnerability exploits.
• Travel/deployment in response to compromised systems.
• Test and evaluation of new network-based investigative tools.
• Provides network-engineering solutions by reverse engineering new vulnerabilities and malicious code to build counterattack signatures.
• Perform in-depth forensic analysis of compromised systems to identify malicious code and data extraction techniques.
• Provides consolidated executive summaries and detailed analysis for tactical commanders.
• Provide and maintain offsite storage of tape backups.

Skills

Windows system administrator

Exploit development

Reverse engineering

Red team capabilities

Engineering experience

Job description

Target Network Analyst job at AERMOR LLC. Suffolk, VA.

Location: Suffolk, VA

Position Type: Full-Time

Experience: 7+ years

Clearance: Secret

AERMOR is seeking a Target Network Analyst (SME IV) to join our team in Suffolk, VA. The ideal candidate will possess strong Windows Administration skills, exploit development, reverse engineering, red team capabilities and engineering experience.

Responsibilities:

• Provide Scientific analysis of electronic evidence of compromised systems to establish vulnerability exploits.
• Travel/deployment in response to compromised systems.
• Provide consultative, technical research and analytical support on information security trends, standards, concepts andsolutions.
• Test and evaluation of new commercial and/or government developed network-based investigative tools.
• Provides network-engineering solutions of state-of-the-art technologies by conducting reverse engineering of new vulnerabilities and malicious code in order to build counterattack signatures against known and unknown threats.
• Perform in-depth forensic analysis of compromised systems to include identification of malicious code, methods ofcompromise and data extraction techniques.
• Tracks trends and performs network nodal analysis on the Navy infrastructure to determine security gaps and network configuration deficiencies.
• Correlate technical and trend analysis for distribution to CND community.
• Primary liaison with national level intelligence collection in support of Tier II CND intelligence requirements.
• Provide I&W, AS&W and CND measures using intelligence analysis to implement CND defense options for response to immediate hostile threats.
• Provide real-time response to network compromises; may need to work flexible schedule based on crisis operations or flyaway watch team.
• Research various open-source hacker techniques and vulnerability exploit forums.
• Provides consolidated executive summaries and detailed analysis technical briefings for tactical commanders.
• Perform in-depth analysis of compromised systems to include identification of malicious code, methods of compromise and data extraction techniques.
• Provide and maintain offsite storage of tape backups.

Qualifications:

• 7 - 10 years of experience as a Windows system administrator.
• 5+ years’ experience in exploit development, reverse engineering, red team capabilities and engineering are required.
• CCNA Certification is preferred but not required.
• Experience utilizing and administering Linux-based operating systems.
• Experience with researching various cyber actors’ TTPs, organizational structures, capabilities, personas, and environments, and integrate findings into penetration tests or web risk assessment operations.
• Web Server configuration knowledge: Microsoft IIS, Apache Server, Apache Tomcat.
• Experience with executing technical cyber assessments or penetration tests.
• Experience with the utilization of testing methodology for cloud-based and networked systems.
• Experience with modification, testing and utilization of computer network attack and exploitation tools.
• Experience with Operational Risk Management (ORM) concepts and application.
• Software installation, upgrades, patches, and configuration support ensuring IA/C&A compliance.
• DNS and DHCP configuration, support and maintenance.
• Group Policy configuration, support, and maintenance.
• Active Directory configuration, support, and maintenance.
• Proficient in the application of Secure Technical Implementation Guides (STIGs).
• Configuration and administration support for CTE network accounts.
• Subject matter expertise in the deployment and implementation of operating systems and application software.
• Ability to implement software, Cyber assessment tools, information assurance products, or computer security applications (preferred).
• Experience with computer network or system design and implementation (preferred).
• Application support for various systems tools and utilities.
• Excellent oral and written communications skills.
• Able to work alone or in a small group to resolve tasks independently with minimal supervision.
• Correlate technical and trend analysis for distribution to CND community.