Network Based Systems Analyst II
Core
Monitor network activity and analyze it for evidence of suspicious behavior to protect information systems from threats.
Role type
Cyber Network Defense Analyst (CNDA)
Builds
Incident response investigations, security reports, and mitigation strategies for government clients.
Domain
Cybersecurity, Network Defense
Required skills
Network investigations, TCP/IP protocols, standard protocols (ICMP, HTTP/S, DNS, SSH, SMTP, SMB, NFS), Wi-Fi networking, network topologies (DMZs, WANs), SIEM (Splunk), MITRE ATT&CK, network traffic analysis, PCAP analysis, network device integrity assessment.
Preferred skills
Network analysis software (Wireshark), PCAP carving, non-traditional traffic analysis (Command and Control), evidence preservation, Linux/Windows security system design, virtualized environments.
Technologies
Splunk, Wireshark, TCP/IP, ICMP, HTTP/S, DNS, SSH, SMTP, SMB, NFS, MITRE ATT&CK
Responsibilities
Coordinate preliminary incident response investigations, interface with customers on-site, determine courses of action for anomalous network activity, assess network topology and device configurations, write and publish Computer Network Defense guidance, collect network intrusion artifacts, analyze malicious network activity, collect network device integrity data, assist with real-time CND incident handling.
Seniority
Mid-level, hands-on IC