Intrusion Analyst 3

Job Description:

We are seeking an Intrusion analyst with expertise in target digital network analysis and malware analysis. In this role, you will analyze target digital network data to discover, analyze, and document malicious or unauthorized activity using information collected from various SIGINT and computer network defense resources. You will also analyze metadata from tasked communications systems to identify, locate, and track targets, accurately reporting the intelligence gained. Additionally, you will categorize traffic as benign, suspicious, or malicious, document malicious tactics, techniques, and procedures (TTPs), and develop and implement mitigation strategies. This position focuses on network and/or host-based analysis.

The Level 3 Intrusion Analyst shall possess the following capabilities:

• Analyze target digital network data to discover, analyze, and document malicious or unauthorized activity using information collected from a variety of SIGINT and computer network defense resources.
• Analyze metadata collected from tasked communications systems in order to identify, locate, and track targets, and to accurately report the intelligence gained from metadata analysis.
• Categorize traffic as benign, suspicious, or malicious activity; and document malicious tactics, techniques, and procedures (TTPs).
• Develop and implement mitigation strategies.
• Have a network and/or host-based focus.

Qualifications:

• Relevant experience must be in malware analysis. Programming experience in C, C#, C++, Java, Perl, or Python is preferred.
• A Bachelor's degree and 8 years of relevant experience or a Master's degree plus 6 years of relevant experience or a Doctoral degree and 4 years of relevant experience. An Associate's degree plus 10 years of relevant experience may be considered for individuals with in-depth experience that is clearly related to the position.
• Degree must be in Computer Science, Computer Engineering, Information Systems, or related discipline from an accredited college or university.

Certifications Required:

• CISSP, CEH, Sec+, Net+, GIAC, GREM, or CREA Certification is required.
  
  

Must Have An ACTIVE TS/SCI With Full Scope Poly