Computer Network Defense Analyst

ICF – Atlanta, GA

Description

Join our team of cyber pioneers with expertise and decades of experience defending and protecting some of the nation’s most valuable resources—ICF. Through implementation of effective cyber security solutions, ICF supports security awareness, readiness, resilience and response to cyber incidents. Our extensive customer base has benefited from the leading-edge work our security engineers and data scientists perform in maintaining and advancing situational awareness of the current cyber threat landscape.

Job Description:
As a Computer Network Defense Analyst (CND) you will be responsible for monitoring client networks to detect suspicious and hostile activity that would jeopardize the integrity of information systems. Analysts are responsible for reviewing logs from various security tools and network traffic analyzers. You must be able to compile information and prepare computer security incident reports based on intrusions, events, and incidents that are detected. You will work closely with infrastructure engineers, information assurance engineers, and system administrators to ensure mitigation of all activity detected. This CND

position requires the ability to work night shift and has limited travel. Job location is in (Atlanta) Smyrna, GA.

Key Responsibilities:
Constant monitoring of intrusion detection systems.

Creation of technically detailed reports based on intrusions and events.

Provides assistance in computer incident investigations.

Coordinate with other teams to remediate detected incidents.

Analyze and evaluate anomalous network and system activity.

Recommend modifications to security tools to detect, prevent, and mitigate intrusions.

Assist in troubleshooting and problem solving a wide variety of client issues.

Provide quality customer service with excellent communication skills.

Basic Qualifications:
Ability to maintain an active clearance.

Bachelor’s Degree in Computer Science or related technical discipline, or the equivalent combination of education, professional training, or work experience.

DOD 8570 Compliance requires one of these current security certifications: Security+ CE (Continuing Education) and/or CEH.

3 years of network defense / incident response / IA experience.

3 years hands-on experience in the detection, response, mitigation, and/or reporting of cyber threats affecting client networks and one or more of the following:

Computer intrusion analysis

Intrusion detection

Computer network surveillance/monitoring

Knowledge and understanding of network protocols, network devices, multiple operating systems, and secure architectures

System log analysis

Experience with current cyber threats and the associated tactics, techniques, and procedures used to infiltrate computer networks

Experience in developing, refining, and performing advanced analysis to uncover new or potential incidents and report on results.

Experience in assessing threat indicators (e.g. Malware/Malicious Anomalies/Abnormal network Activity/Root Level Compromise, etc.).

An advanced understanding of current threats and trends present in the Information Security and Technology field.

Ability to demonstrate strong knowledge of computer security concepts.

Demonstrated ability to document processes.

Ability to work shift as required (night and day shifts).

Qualifications

Preferred Skills/Experience:
Initiative and a personal interest in Information Technology Security.

People skills, and the ability to communicate effectively with various clients with the ability to explain and elaborate on technical details.

Relevant IT certifications such as Certified Information Systems Security Professional (CISSP), GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Incident Handler (GCIH), Encase Certified Examiner (ECE), and EC-Council Certified Incident Handler (ECIH).

Prior experience with IT security devices and tools such as Encase, Check Point Firewalls, Blue Coat Secure Web Gateway, Source Fire IDS/IPS, Symantec DLP, and Fore Scout.

Experience with the CJCSM 6510 Cyber Incident Handling Program tactics, techniques, and procedures (TTPs).

An understanding of DOD information assurance policy and regulations.

Professional Skills/Required Skills:
Excellent written and verbal communication skills.

Excellent problem solving skills

ICF offers an excellent benefits package, an award winning talent development program, and fosters a highly skilled, energized and empowered workforce.

ICF is an equal opportunity employer that values diversity at all levels. (EOE – Minorities/Females/ Protected Veterans Status/Disability Status/Sexual Orientation/Gender Identity)

Working at ICF

Working at ICF means applying a passion for meaningful work with intellectual rigor to help solve the leading issues of our day. Smart, compassionate, innovative, committed, ICF employees tackle unprecedented challenges to benefit people, businesses, and governments around the globe. We believe in collaboration, mutual respect, open communication, and opportunity for growth. ICF—together for tomorrow.

About ICF

ICF (NASDAQ: ICFI) is a global consulting and technology services provider with more than 5,000 professionals focused on making big things possible for our clients. We are business analysts, policy specialists, technologists, researchers, digital strategists, social scientists and creatives. Since 1969, government and commercial clients have worked with ICF to overcome their toughest challenges on issues that matter profoundly to their success. Come engage with us at

icf.com

.

Primary Location

:

United States-Georgia-Atlanta

Source:https://www.indeed.com/viewjob?jk=c3403e08a8056063&q=forensic+computer&tk=1blu9auufbscgd2t&from=web