At Dobbs Defense, we deliver mission-centric IT, Cyber, and data analytics solutions for our government and commercial clients through the convergence of automation, innovation, training, and education. Delivering high-quality IT, cybersecurity, and data analytics solutions through proven and innovative methods is our vision.
Job Description
Dobbs Defense Solutions is seeking a Cyber Security (Incident Response) Analyst to join our team. The Analyst will support a government Cyber Security Operation Center (CSOC) will conduct security event monitoring, advanced analytics, and response activities in support of the CND operational mission with diverse backgrounds in cyber security systems operations, analysis and incident response. The analyst will also Prepare analysis reports detailing background, observables, analysis process & criteria, and conclusions.
Duties
- Perform technical analysis on a wide range of cybersecurity issues, with a focus on network activity, host activity, and data. This includes but is not limited to: network flow (i.e. netflow) or related forms of session summary data, signature-based IDS/IPS alert/event data, full packet capture (PCAP) data, proxy and application server logs (various types).
- Triage IDS/IPS alerts, collect related data from various systems, review open and closed source information on related threats & vulnerabilities, diagnose observed activity for likelihood of system infection, compromise or unintended/high-risk exposure.
- Analyze large volumes of network flow data for specific patterns/characteristics or general anomalies, to trend network activity and to correlate flow data with other types of data or reporting regarding enterprise-wide network activity.
- Leverage lightweight programming/scripting skills to automate data-parsing and simple analytics. Document key event details and analytic findings in analysis reports and incident management systems. Identify, extract and characterize network indicators from cyber threat intelligence sources, incident reporting and published technical advisories/bulletins.
- Assess cyber indicators/observables for technical relevance, accuracy, and potential value/risk/reliability in monitoring systems. Recommend detection and prevention/mitigation signatures and actions as part of a layered defensive strategy leveraging multiple capabilities and data types.
- Develop IDS/IPS signatures, test and tune signature syntax, deploy signatures to operational sensors, and monitor and tune signature and sensor performance.
- Fuse open-source threat & vulnerability information with data collected from sensors across the enterprise into cohesive and comprehensive analysis.
- Develop security metrics and trend analysis reports
Qualifications
Required education and experience:
- Bachelor’s degree in computer science, Information Systems, or equivalent education or work experience (additional relevant work experience can be substituted for a degree)
- Must have a current DoD 8570.1-M IAT Level II certification
- Desired Certifications: CEH, GCIH, GCIA, GCFA
- 3+ years in a SOC or Incident Response role
- Experience with Cisco Firepower, Cisco Sourcefire, Cisco Advanced Malware Protection, Cisco Stealthwatch, Cisco Umbrella
Required Clearance
- TS/SCI
Working Environment
- Onsite
Our Equal Employment Opportunity Policy
Dobbs Defense Solutions is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or medical conditions related to pregnancy, childbirth or breastfeeding), sexual orientation, gender or gender identity (except where gender is a bona fide occupational qualification), gender expression and transgender status, national origin, ancestry, age, disability, military or veteran status, marital or domestic partner status, genetic information, citizenship, low-income status or any other status or characteristic protected by applicable law. We are committed to equal employment opportunity in all decisions related to employment, promotion, wages, benefits, and all other privileges, terms, and conditions of employment.
Similar Jobs
What We Do
We work with government and commercial customers to develop enterprise IT, cyber, and analytics solutions. We are committed to supporting our customers’ missions. Our focus is to invest in an experienced workforce that delivers premier solutions to meet customers’ business and technical requirements.
Dobbs Defense Solutions, LLC is a Service-Disabled, Veteran-Owned Small Business (SDVOSB). The company is registered with the U.S. Department of Veterans Affairs (VA) Center for Veterans Enterprise (CVE), and SDVOSB status has been validated by the VA. The company is headquartered in Rockville, Maryland with a portfolio of Department of Defense (DoD) clients that are centered on information technology, and cybersecurity programs.
Dobbs Defense Solutions, LLC is an 8(a) certified Minority Owned Business, Economically Disadvantaged Women Owned Small business (EDWOSB), Women Owned Small Business (WOSB), and SDVOSB.
Our executives and employees have more than 35 years of proven experience in information technology (IT), cybersecurity, business intelligence (BI), and project/program management (PM). D2S focuses on delivering IT, BI, cybersecurity, and PM capabilities by employing professional services with exceptional results.
