Job Title: CND Lead Analyst

<TABLE border=0 cellSpacing=0 cellPadding=0 width=700 align=left leftmargin="0" topmargin="0"> <TBODY> <TR> <TD class=topparaHeading colSpan=11 align=left> </TD></TR> <TR> <TD class=toppara colSpan=11 align=left> <ul><span style="FONT-SIZE: 10pt"><span style="FONT-FAMILY: Times New Roman"> <li style="MARGIN: 0in 0in 0pt; mso-list: l0 level1 lfo1; tab-stops: list .5in" class=MsoNormal><span style="FONT-SIZE: small">Configure and monitor Intrusion Detection Systems (IDS) for a DoD network to assure that only authorized personnel have access </span> <li style="MARGIN: 0in 0in 0pt; mso-list: l0 level1 lfo1; tab-stops: list .5in" class=MsoNormal><span style="FONT-SIZE: small">Monitor data communications on the network to determine if these communications are consistent with policy</span> <li style="MARGIN: 0in 0in 0pt; mso-list: l0 level1 lfo1; tab-stops: list .5in" class=MsoNormal><span style="FONT-SIZE: small"><span style="mso-bidi-font-style: italic">Receive and analyze network alerts from various sources within the enclave and determine possible causes of alerts</span></span> <li style="MARGIN: 0in 0in 0pt; mso-list: l0 level1 lfo1; tab-stops: list .5in" class=MsoNormal><span style="FONT-SIZE: small"><span style="mso-bidi-font-style: italic">Perform analysis of log files from a variety of sources within the enclave, to include individual host logs, network traffic logs, firewall logs, and intrusion detection system logs</span></span> <li style="MARGIN: 0in 0in 0pt; mso-list: l0 level1 lfo1; tab-stops: list .5in" class=MsoNormal><span style="FONT-SIZE: small"><span style="mso-bidi-font-style: italic">Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources</span></span> <li style="MARGIN: 0in 0in 0pt; mso-list: l0 level1 lfo1; tab-stops: list .5in" class=MsoNormal><span style="FONT-SIZE: small"><span style="mso-bidi-font-style: italic">Perform event correlation using information gathered from a variety of sources within the enclave to gain situational awareness and determine the effectiveness of an observed attack</span></span> <li style="MARGIN: 0in 0in 0pt; mso-layout-grid-align: none; mso-list: l0 level1 lfo1; tab-stops: list .5in" class=MsoNormal><span style="FONT-SIZE: small"><span style="mso-bidi-font-style: italic">Perform CND incident triage to include determining scope, urgency, and potential impact; identify the specific vulnerability and make recommendations which enable expeditious remediation. </span></span> <li style="MARGIN: 0in 0in 0pt; mso-layout-grid-align: none; mso-list: l0 level1 lfo1; tab-stops: list .5in" class=MsoNormal><span style="FONT-SIZE: small"><span style="mso-bidi-font-style: italic">Write and publish CND guidance and reports on incident findings to appropriate constituencies </span></span> <li style="MARGIN: 0in 0in 0pt; mso-layout-grid-align: none; mso-list: l0 level1 lfo1; tab-stops: list .5in" class=MsoNormal><span style="FONT-SIZE: small"><span style="mso-bidi-font-style: italic">Implement and enforce CND policies and procedures reflecting applicable laws, policies, procedures, and regulations </span></span><span style="FONT-FAMILY: Times New Roman"> <li style="MARGIN: 0in 0in 0pt; mso-layout-grid-align: none; mso-list: l0 level1 lfo1; tab-stops: list .5in" class=MsoNormal><span style="FONT-SIZE: small"><span style="mso-bidi-font-style: italic">Track and manage an incident from inception to final remediation and after ction reporting</span></span> </span></span></span></li></ul></TD></TR> <TR> <TD class=topparaHeading colSpan=11 align=left>&nbsp;</TD></TR> <TR> <TD class=topparaHeading colSpan=11 align=left>Required Skills </TD></TR> <TR> <TD class=toppara colSpan=11 align=left> <ul> <li> <DIV style="MARGIN: 0in 0in 0pt" class=MsoNormal><span style="FONT-SIZE: 10pt; mso-bidi-font-style: italic"><span style="FONT-FAMILY: Times New Roman"><span style="mso-bidi-font-style: italic"><span style="FONT-SIZE: small">DoD Secret clearance</span></span></span></span></DIV> <li> <DIV style="MARGIN: 0in 0in 0pt" class=MsoNormal><span style="FONT-SIZE: 10pt; mso-bidi-font-style: italic"><span style="FONT-FAMILY: Times New Roman"><span style="mso-bidi-font-style: italic"><span style="FONT-SIZE: small">Significant knowledge of particular CND tools, tactics, techniques, and procedures which support the tracking, management, analysis, and resolution of incidents</span></span></span></span></DIV> <li> <DIV style="MARGIN: 0in 0in 0pt" class=MsoNormal><span style="FONT-SIZE: 10pt; mso-bidi-font-style: italic"><span style="FONT-FAMILY: Times New Roman"><span style="mso-bidi-font-style: italic"><span style="FONT-SIZE: small">Training and/or experience with IIS Preventia and/or ISS</span></span></span></span></DIV> <li> <DIV style="MARGIN: 0in 0in 0pt" class=MsoNormal><span style="FONT-SIZE: 10pt; mso-bidi-font-style: italic"><span style="FONT-FAMILY: Times New Roman"><span style="mso-bidi-font-style: italic"><span style="FONT-SIZE: small">Minimum 6 years related experience</span></span></span></span></DIV> <li> <DIV style="MARGIN: 0in 0in 0pt" class=MsoNormal><span style="FONT-SIZE: 10pt; mso-bidi-font-style: italic"><span style="FONT-FAMILY: Times New Roman"><span style="mso-bidi-font-style: italic"><span style="FONT-SIZE: small">Excellent communication skills, writing skills and have command of the English language</span></span></span></span></DIV></li></ul></TD></TR></TBODY></TABLE>