Cyber Network Defense Analyst

POSITION SUMMARY:
The Enterprise and Cyber Solutions Operation at Leidos currently has an opening for a Cyber Network Defense Analyst to work at the White House Communications Agency (WHCA) on Joint Base Anacostia-Bolling. Our team supports our customer’s mission to protect the Presidential Information Technology Community networked systems and services from cyber threats, as a 24x7, mission critical operation. We are looking for a self-starter that is capable of independently performing their daily tasks, but also works well within a team that requires significant coordination and inter-team communication.

PRIMARY RESPONSIBILITIES:
•Computer network incident detection and response activities to detect, correlate, identify and characterize anomalous activity that may be indicative of threats to the enterprise. 
•Monitor various security tools and applications for possible malicious activities, investigate any associated alerts or indicators, and develop recommendations for a course of action, including mitigation strategies if required. 
•Requires good technical writing skills as each event, including the associated analysis, must be documented in a ticketing system so that it can be reviewed and acted on appropriately. 
•Requires good communication skills as we are collocated with our customer and regular face-to-face interaction is required throughout the day. 
•Must be able to follow Standard Operating Procedures and perform their duties with a high degree of attention to detail, ensuring that all system checks are performed in a timely manner and all documentation is complete and accurate.

BASIC QUALIFICATIONS:
•Bachelor's Degree and 4+ yrs of experience; additional years of experience may be substituted in lieu of degree.
•Must have a DoD 8570 IAT Level II (or Level III) Certification (e.g. Sec+ CE)
•Must have a DoD 8570 CSSP Analyst Certification (e.g. CEH), OR able to obtain one within 180 days of starting.

Must have a DoD 8570 CSSP Infrastructure Support Certification (e.g. CEH, CySA+, SSCP), OR able to obtain one within 180 days of starting. 

•Must have strong computing system knowledge, particularly networking, including a knowledge of communication protocols and familiarity with common computing security elements such as IDS/IPS systems and firewalls.
•Must be able to pass Yankee White clearance processing prior to start.
•Current DoD TS/SCI security clearance.

PREFERRED QUALIFICATIONS:
•Prior CND experience.
•Monitoring of intrusion detection and computer defense appliances and applications, and analysis of associated alerts.
•Documenting analysis and providing response recommendations.
•Experience reviewing system logs and pcap analysis.

GSMO
External Referral Eligible