.jpeg)
TDI is seeking a Cyber Network Defense Analyst to join the Compartmented Enterprise Services Office (CESO) effort. This program is establishing a modern secure web service (SWS) operation as part of a state-of-the-art, highly automated platform capable of supporting a rapidly expanding customer population. Our team supports CESO's mission to protect networked systems and services from cyber threats as CESO migrates to a high security cloud environment, operating as a 24x7, mission-critical function providing network defense, monitoring, and incident response services. We are looking for a self-starter capable of independently performing daily tasks while also working well within a team that requires significant coordination and communication.
Multiple positions are available, including day-shift opportunities in Arlington, VA, and night-shift opportunities in San Antonio, TX. All positions are fully onsite and require an active TS/SCI clearance.
RESPONSIBILITIES:
- Perform computer network incident detection and response activities to detect, correlate, identify, and characterize anomalous activity indicative of threats to the CESO enterprise.
- Monitor security tools and applications for potential malicious activity, investigate associated alerts and indicators, and recommend appropriate courses of action, including mitigation strategies as required.
- Document security events and associated analysis in a ticketing system using clear and accurate technical writing to support appropriate review and action.
- Maintain regular face-to-face interaction with the customer and address customer-raised issues with little or no supervision.
- Perform system checks in a timely manner and ensure all associated documentation is complete and accurate.
- Assist senior analysts and/or managers with forecasting and modeling current threats.
- Collaborate with infrastructure, storage, database, and application teams to align network defense monitoring with CESO operational requirements as the program transitions to a secure cloud environment.
QUALIFICATIONS:
- Candidate must currently have a TS/SCI with the ability to obtain and maintain a CI Poly.
- DoDD 8140 compliant certification, at minimum IAT Level II (e.g., Security+ CE), at start.
- Bachelor's degree and 2+ years of related experience; additional experience, education, or training may be considered in lieu of degree.
- Strong knowledge of computing systems, including Windows, Red Hat, and cloud environments (AWS and Azure), with particular expertise in networking, communication protocols, and common security technologies such as IDS/IPS systems and firewalls.
- Experience implementing application and hardware security settings in accordance with vendor and DISA best business practices.
The anticipated salary range for this position is $110,000 - $120,000. This range is a good-faith estimate and not a guarantee of compensation. Final compensation will be based on factors including experience, education, skills, geographic location, internal equity, market data and applicable contract requirements, and may fall outside the posted range.
Skills Required
- Currently hold an active TS/SCI clearance and be able to obtain and maintain a CI Polygraph
- DoDD 8140-compliant certification at minimum IAT Level II, such as Security+ CE, at start
- Bachelor's degree and 2+ years of related experience; equivalent additional experience, education, or training may substitute for the degree
- Strong knowledge of Windows, Red Hat, and cloud environments including AWS and Azure
- Expertise in networking, communication protocols, IDS/IPS systems, and firewalls
- Experience implementing application and hardware security settings according to vendor and DISA best practices
What We Do
For over 20 years, TDI’s one and only passion has been delivering cybersecurity solutions to effectively manage the business of cyber. At the global vanguard of innovation, we created Cybersecurity Performance Management (CPM) and the industry-leading CPM platform, CnSight®. Combining CnSight® with our remarkable historical experience and our exceptional capabilities of cyber operations and compliance, we offer Managed Cybersecurity Performance, a first of its kind managed CPM offering. TDI’s CPM solutions mitigate risk, reduce ransomware, provide continuous compliance, improve cyber-ROI, and provide comprehensive instantaneous visibility into how an organization is performing against its cyber strategy, particularly for Boards of Directors. CnSight® is the industry-leading Cybersecurity Performance Management (CPM) platform which mitigates risk, reduces ransomware, provides continuous compliance, improves cyber-ROI, and provides comprehensive instantaneous visibility into how an organization is performing against its cyber strategy, so executives and Boards may effectively manage the business of cybersecurity– the result: reduced stress, better performance, less cost, and a true understanding of cyber investment. With CnSight® at its core, TDI’s Managed Cybersecurity Performance offering ensures strategic cyber goals are met to protect an organization’s investments, assets and reputation by reducing the risk of ransomware, lowering cyber insurance premiums, improving ROI, reducing legal and fiduciary liability, delivering actionable reporting to the Board and C-Suite, providing on-call advice, ensuring continuous compliance and providing subject matter expertise on the organization’s behalf in meeting with the C-Suite and the Board, dealing with auditors, and supporting budget decisions – the result: reduced stress, better performance, less cost, and a true understanding of cyber investment.
