Cyber Defense Analyst (2nd Shift)*
About this role
Requires US Citizenship Yes
Employment Term and Type: Regular, Full Time
Required Security Clearance: (Minimum for hire) TS/SCI
Required Education: (Minimum for hire) BA/BS in CS, IT, IA or related area of study desired; without a degree 8+ years relevant professional experience in those fields.
Salary Band: $91,085.69 to $104,097.93
Job Description:
FGS, LLC is seeking a Cyber Defense Analyst (2nd Shift) to support the Navy's cybersecurity environment at the Office of Naval Intelligence (ONI) Hopper Global Communications Center (HGCC) in Suitland, Maryland. The selected candidate will provide front-line cyber defense for critical TS/SCI networks by monitoring and investigating cybersecurity alerts, identifying potential threats, and supporting proactive threat-hunting activities.
The Cyber Defense Analyst will apply concentrated Computer Network Defense (CND) experience and knowledge of IT systems and networks to analyze security events, manage incident and event tickets, correlate activity across multiple cybersecurity platforms, support intelligence gathering and analysis, and communicate findings to Government and program stakeholders. This is a second-shift position with regular work hours of 1530-2330; occasional floater shifts or coverage outside these hours may be required based on program and staffing needs.
Primary Duties and Responsibilities:
• Perform first-line monitoring and initial analysis of cybersecurity alerts affecting TS/SCI networks, including JWICS, ATLAS, and other networks supported by HGCC. • Monitor SIEM, NIDPS, host-based security, endpoint, and related cybersecurity tools for alerts, anomalies, indicators of compromise, and suspicious activity. • Investigate and perform initial technical analysis of cybersecurity alerts and events; document findings and escalate potential incidents to Tier 2 or other responsible personnel as appropriate. • Create, update, track, and manage cybersecurity incident and event tickets using approved ticketing and case-management systems. • Conduct proactive threat-hunting activities and correlate security events across multiple platforms to identify malicious activity, emerging threats, patterns, and trends. • Perform wireless security scans of facilities and document, analyze, and report findings. • Use CND tools and knowledge of network security architecture, enterprise services, adversary TTPs, malware, and attack vectors to support analysis and investigation. • Prepare and deliver operational, technical, and situational-awareness briefings and written reports to Government and program stakeholders. • Support annual cyber defense exercises and development or improvement of CND tactics, techniques, procedures, best practices, manuals, and standard operating procedures.