Cyber Security Analyst

Computer Technologies Consultants (CTC, Inc.) is seeking a Cyber Security Analyst to provide support on a US Navy Enterprise Networks program in Annapolis Junction, MD. With offices in Washington DC and San Diego, CA, CTC is a leading technology company providing lifecycle IT, data analytics, cloud managed hosting services, agile software development, DevOps, Test Automation, Cyber Security, and infrastructure solutions. Additionally, we provide Professional Talent Acquisition Services as we proudly support the unique needs of U.S. Defense, Intelligence, and Federal Civilian agencies as well as Fortune 1000 companies. Why Should You Be Interested ?
•Full-time position
•Competitive pay and comprehensive benefits
•Certified Small Business with room for growth
•Long term and stable contract Position Title: Cyber Security Analyst Position Location : This position is onsite in Annapolis Junction, MD. Daily Responsibilities :
•Perform technical analysis on a wide range of cybersecurity issues, with a focus on network activity, host activity, and data. This includes, but is not limited to: network flow (i.e. netflow) or related forms of session summary data, signature-based IDS/IPS alert/event data, full packet capture (PCAP) data, proxy and application server logs (various types).
•Triage IDS/IPS alerts, collect related data from various systems, review open and closed source information on related threats & vulnerabilities, diagnose observed activity for likelihood of system infection, compromise or unintended/high-risk exposure.
•Prepare analysis reports detailing background, observables, analysis process & criteria, and conclusions.
•Analyze large volumes of network flow data for specific patterns/characteristics or general anomalies, to trend network activity and to correlate flow data with other types of data or reporting regarding enterprise-wide network activity.
•Leverage lightweight programming/scripting skills to automate data-parsing and simple analytics. Document key event details and analytic findings in analysis reports and incident management systems. Identify, extract and characterize network indicators from cyber threat intelligence sources, incident reporting and published technical advisories/bulletins.
•Assess cyber indicators/observables for technical relevance, accuracy, and potential value/risk/reliability in monitoring systems. Recommend detection and prevention/mitigation signatures and actions as part of a layered defensive strategy leveraging multiple capabilities and data types.
•Develop IDS/IPS signatures, test and tune signature syntax, deploy signatures to operational sensors, and monitor and tune signature and sensor performance.
•Fuse open-source threat & vulnerability information with data collected from sensors across the enterprise into cohesive and comprehensive analysis.
•Develop security metrics and trend analysis reports Qualifications :
•Bachelor's degree in Computer Science, Information Systems, or equivalent education or work experience (additional relevant work experience can be substituted for a degree)
•Must have a current DoD 8570.1-M IAT Level II certification Desired :
•Desired Certifications: CEH, GCIH, GCIA, GCFA
•3+ years in a SOC or Incident Response role
•Experience with Cisco Firepower, Cisco Sourcefire, Cisco Advanced Malware Protection, Cisco Stealthwatch, Cisco Umbrella
•Experience with deploying and writing signatures (Snort, YARA, HIPS)
•Experience with network hunting utilizing Zeek/Bro
•Experience with McAfee ePO, HBSS
•Splunk: Create log searches, dashboards, setting up alerts, and scheduled reports to help detect and remediate security concerns.
•Experience with ArcSight
•Experience with Wireshark and packet analysis
•Experience with Tanium or other endpoint solutions
•Working knowledge of scripting languages such as Python, PowerShell, Shell
•Knowledge of Regular Expressions
•Knowledge of server and client operating systems
•Participate in development and reporting of security metrics
•Experience in a SOC or Incident Response role Required Clearance :
•Must possess an active TS/SCI clearance Pay Information Full-Time Salary Range: TBD Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience. Benefits/Perks
•401(k) matching
•Accident and Hospital Indemnity Insurance
•Dental Insurance
•Disability Insurance
•Employee Referral Bonus Program
•Employee Assistance Plan
•Flexible spending account
•Health insurance
•Life insurance (Term and Universal Life w/Long Term Care benefits)
•Paid time off (Vacation, Sick leave, and 11 Federal Holidays)
•Professional development assistance/Tuition reimbursement Program
•Profit Sharing Retirement Program
•Vision insurance Computer Technologies Consultants, Inc. is an Equal Opportunity Employer that provides employment opportunities for all qualified applicants without regard to race, color, religion, gender identity and/or expression, sexual orientation, age, mental or sensory differing abilities, protected veteran status, sex, national origin, or any other characteristic protected by applicable law. Computer Technologies Consultants, Inc. is devoted to diversity, equity, and inclusion.