Cyber Network Defense Analyst

Quantum Science Solutions (QSS) supports mission-critical federal cybersecurity programs providing advanced technical assistance, proactive threat hunting, and rapid incident response using host-based, network-based, and cloud-based analysis capabilities. We are seeking a Cyber Network Defense Analyst (CNDA) to monitor and analyze network activity, identify suspicious or malicious behavior, and support Digital Forensics and Incident Response (DFIR) operations. This role involves investigating network threats, analyzing intrusion artifacts, and providing technical recommendations to protect government systems and critical infrastructure., * Assist Government leads in coordinating incident response investigations and onsite customer engagements.

• Analyze anomalous network activity and recommend appropriate response and mitigation actions.
• Assess network topologies and device configurations to identify security vulnerabilities and recommend improvements.
• Collect and analyze network intrusion artifacts, including PCAP data, domains, URIs, certificates, and related indicators.
• Investigate malicious network activity to identify exploited vulnerabilities, attack methods, and system impacts.
• Collect and analyze network device integrity data for evidence of tampering or compromise.
• Support real-time Computer Network Defense (CND) incident handling, including forensic collections, intrusion correlation, tracking, and threat analysis.
• Provide technical recommendations for system remediation during onsite incident response engagements.

• U.S. Citizenship.
• Active TS/SCI clearance.
• Ability to obtain Department of Homeland Security (DHS) Suitability.
• Five (5) or more years of directly relevant network investigations experience.
• In-depth knowledge of Computer Network Defense (CND) policies, procedures, and regulations.
• In-depth knowledge of TCP/IP and standard network protocols, including ICMP, HTTP/S, DNS, SSH, SMTP, SMB, and NFS.
• In-depth knowledge of Wi-Fi networking and network topologies, including DMZs and WANs.
• Substantial experience with Splunk or other Security Information and Event Management (SIEM) platforms.
• Understanding of the MITRE ATT&CK framework, defense-in-depth principles, and common cyberattack stages.
• Ability to analyze network traffic and metadata to identify anomalous activity and potential threats.
• Experience reconstructing malicious attacks or activities using network traffic evidence.
• Experience examining network topologies and analyzing data flows across network environments.
• Ability to work collaboratively across multiple physical locations., * Knowledge of network device integrity concepts and methodologies.
• Proficiency with network analysis tools such as Wireshark.
• Experience carving and extracting information from PCAP data.
• Experience analyzing non-traditional network traffic, including Command and Control (C2) activity.
• Knowledge of evidence preservation procedures and standards.

• Experience working with virtualized environments., Bachelor’s degree in Computer Science, Cybersecurity, Computer Engineering, or a related technical discipline. OR High School Diploma with seven (7) to nine (9) years of directly relevant network investigations experience., * DoD 8140.01 IAT Level II

• IASAE Level II
• CSSP Analyst / CSSP Incident Responder
• GIAC Certified Intrusion Analyst (GCIA)
• GIAC Certified Incident Handler (GCIH)
• Certified Ethical Hacker (CEH)
• SANS GIAC Network Forensic Analyst (GNFA) preferred

• Competitive compensation with annual performance bonuses
• Premium Medical, Dental & Vision coverage
• Generous PTO plus Federal Holidays
• 401(k) with company match