Cyber Network Defense Analyst

Quantum Science Solutions (QSS) is seeking a Cyber Network Defense Analyst (CNDA) to support a critical customer mission by monitoring network activity, identifying suspicious behavior, and analyzing potential cybersecurity threats across enterprise environments. The Cyber Network Defense Analyst will utilize information collected from multiple sources to detect, investigate, and report cybersecurity events that may threaten network resources and information systems. This position requires experience in cyber defense analysis, intrusion detection, packet-level analysis, and threat identification to support the protection of critical network infrastructure.

Key Responsibilities

• Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.

• Coordinate with enterprise-wide cyber defense teams to validate network alerts and identify potential security incidents.

• Document and escalate cybersecurity incidents, including event history, status, and potential impact, for further investigation and response.

• Perform cyber defense trend analysis and prepare reports identifying patterns, anomalies, and emerging threats.

• Correlate security events using information collected from multiple enterprise sources to improve situational awareness and evaluate attack effectiveness.

• Prepare daily summary reports of network events and activities relevant to cyber defense operations.

• Receive and analyze network alerts from various enterprise sources to determine possible causes and security implications.

• Detect, identify, and report potential attacks, intrusions, anomalous activities, and network misuse while distinguishing malicious events from benign activity.

• Utilize cyber defense tools to continuously monitor and analyze system activity for malicious behavior.

• Investigate malicious activity to identify exploited weaknesses, exploitation methods, and potential impacts on systems and information.

• Identify and analyze network traffic anomalies using metadata.

• Validate Intrusion Detection System (IDS) alerts against network traffic using packet analysis tools.

• Identify applications and operating systems associated with network devices through network traffic analysis.

• Reconstruct malicious attacks or activities using network traffic evidence.
• Identify network mapping and operating system fingerprinting activities.
• Assist in developing detection signatures for implementation within cyber defense network tools in response to emerging or observed threats.

• U.S. Citizenship.
• Active Secret clearance
• Ability to obtain DHS Suitability.

• 2+ years of directly relevant experience in cyber defense analysis using leading edge technologies and industry-standard cyber defense tools.

• Demonstrated experience successfully developing and deploying cybersecurity detection signatures.

• Experience detecting host-based and network-based intrusions using intrusion detection technologies, such as Snort.

• Experience implementing incident handling methodologies.
• Experience implementing protocol analyzers.
• Experience collecting data from multiple cyber defense resources.

• Experience reading and interpreting intrusion detection signatures, including Snort signatures.

• Experience performing packet-level network traffic analysis.
• Experience conducting cybersecurity trend analysis.

Preferred Skills

• Python programming experience.
• Strong mathematics and science background.
• Experience utilizing the Carnegie Mellon SiLK tool suite.
• Experience with ArcSight or another Security Information and Event Management (SIEM) solution.

Education

• Bachelor’s degree in Cyber Security, Computer Engineering, or a related degree.
• High School Diploma with 4+ years of network investigations experience

Desired Certifications

• GIAC Network Forensic Analyst (GNFA)
• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Intrusion Analyst (GCIA)
• GIAC Security Essentials (GSEC / SANS401)
• CompTIA Advanced Security Practitioner (CASP+)
• CompTIA Cybersecurity Analyst (CySA+)
• PaLMS
• Federal Virtual Training Environment (FedVTE)
• CompTIA Network+
• CompTIA Security+

At QSS, you’ll contribute to critical cybersecurity missions by identifying network threats, analyzing malicious activity, and strengthening cyber defense operations. Your technical expertise will support the protection of essential information systems and network infrastructure. Benefits Include:

• Competitive compensation with annual performance bonuses
• Premium Medical, Dental, & Vision coverage
• Generous PTO plus Federal Holidays
• 401(k) with company match
• Professional development and certification support