Intrusion Analyst

Experience: A Bachelor's degree plus 8 years of relevant experience or a Master's degree plus 6 years of relevant experience or a Doctoral degree plus 4 years of relevant experience. An Associate's degree plus 10 years of relevant experience may be considered for individuals with in-depth experience that is clearly related to the position.

Education: Degree must be in Computer Science, Computer Engineering, Information Systems, or related discipline from an accredited college or university

Relevant Experience: Must be in malware analysis. Programming experience in C, C#, C++, Java, Perl, or Python is preferred. CISSP, CEH, Sec+, Net+, GIAC GREM and/or CREA

Job Description:

We are looking for an Intrusion Analyst to analyze target digital network data and identify unauthorized activities using SIGINT and computer network defense resources. You will categorize network traffic, document malicious tactics, techniques, and procedures, and develop mitigation strategies to protect our systems. You will conduct deep packet analysis and data inspection and use hex dumps to tease out protocols.

The Intrusion Analyst Level 3 shall possess the following capabilities:

Analyze target digital network data to discover, analyze, and document malicious or unauthorized activity using information collected from a variety of SIGINT and computer network defense resources.

Analyze metadata collected from tasked communications systems in order to identify, locate, and track targets, and to accurately report the intelligence gained from metadata analysis.

Categorize traffic as benign, suspicious, or malicious activity; and document malicious tactics, techniques, and procedures (TTPs).

Develop and implement mitigation strategies.

Have a network and/or host-based focus.

Qualifications:

Master’s degree with 6 years of relevant experience.

Bachelor’s Degree with 8 years of relevant experience.

Associates degree with 10 years of experience.

Bachelor’s Degree must be in Computer Science, Computer Engineering, Information Systems, or related discipline from accredited college or university.

Relevant experience must be in malware analysis and programming experience in C, C#, C++, Java, Perl, or Python is preferred.

Strong signals/protocol analysis capabilities (451/452 graduate preferred).

Experience with Packetswing, DVT/WVT, and AMOD tools.

Certifications Required:

CISSP, CEH, Sec+, Net+, GIAC GREM and/or CREA Certification are required.