Cyber Network Defense Analyst
Quantum Science Solutions · Arlington, VA, United States ·
COMPENSATION
€•• – ••k
Listed on WeAreDevelopers
- U.S. Citizenship required
- Active TS/SCI clearance
- 5+ years experience
- Splunk & Wireshark
- Federal cybersecurity
Join Quantum Science Solutions to support mission-critical federal cybersecurity initiatives. You will provide advanced technical assistance, conduct proactive threat hunting, and execute rapid incident response using host-based, network-based, and cloud-based analysis capabilities.
As a Cyber Network Defense Analyst, you will monitor network traffic to identify malicious behavior and support Digital Forensics and Incident Response teams. Your work helps protect government systems and critical infrastructure from evolving cyber threats.
What you'll do
- Monitor and analyze network activity to detect suspicious behavior
- Support Digital Forensics and Incident Response operations
- Investigate network threats and analyze intrusion artifacts
- Coordinate incident response investigations with government leads
- Recommend mitigation actions for anomalous network activity
- Assess network topologies to identify security vulnerabilities
- Analyze PCAP data, domains, URIs, and certificates
- Collect network device integrity data to check for tampering
- Handle real-time Computer Network Defense incidents
- Provide technical remediation recommendations during onsite engagements
What you'll need
- U.S. Citizenship is mandatory
- Active TS/SCI security clearance required
- Ability to obtain DHS Suitability determination
- Bachelor's in Computer Science or related field
- Or High School Diploma with 7-9 years relevant experience
- 5+ years of directly relevant network investigations experience
- DoD 8140.01 IAT Level II certification required
- IASAE Level II certification required
- CSSP Analyst or CSSP Incident Responder certification
- Deep knowledge of TCP/IP and standard network protocols
- Proficiency with Splunk or other SIEM platforms
- Understanding of MITRE ATT&CK framework
- Experience with Wireshark and PCAP data extraction
- Knowledge of evidence preservation procedures
Nice to have
- GIAC Certified Intrusion Analyst (GCIA)
- GIAC Certified Incident Handler (GCIH)
- Certified Ethical Hacker (CEH)
- SANS GIAC Network Forensic Analyst (GNFA)
Stack
- Splunk
- Wireshark
- TCP/IP
- DNS
- SSH
- HTTP/S
- ICMP
- SMTP
- SMB
- NFS
- MITRE ATT&CK
- PCAP
- SIEM
- Virtualization