Network Based Systems Analyst II
Core
Monitor network activity and analyze it for evidence of suspicious behavior to protect information systems from threats.
Role type
Cyber Network Defense Analyst (CNDA)
Builds
Cyber defense monitoring and analysis services for government clients
Domain
Cybersecurity / Network Defense
Required skills
Network traffic analysis, Intrusion detection, Incident handling, Packet analysis, Signature development, Trend analysis, Event correlation, IDS validation, Network mapping analysis, Malicious activity reconstruction
Preferred skills
Python programming, SiLK tool suite usage, Advanced math and science background
Technologies
Snort, Arcsight, SEIM solutions, Protocol analyzers, Network traffic metadata
Responsibilities
Characterize and analyze network traffic to identify anomalous activity and potential threats; Coordinate with enterprise-wide cyber defense staff to validate network alerts; Document and escalate incidents; Perform cyber defense trend analysis and reporting; Perform event correlation using information gathered from a variety of sources; Provide daily summary reports of network events; Receive and analyze network alerts from various sources; Use cyber defense tools for continual monitoring and analysis; Analyze identified malicious activity to determine weaknesses exploited; Identify and analyze anomalies in network traffic using metadata; Validate intrusion detection system (IDS) alerts against network traffic using packet analysis tools; Identify applications and operating systems of a network device based on network traffic; Reconstruct a malicious attack or activity based off network traffic; Identify network mapping and operating system (OS) fingerprinting activities; Assist in the construction of signatures for cyber defense network tools.
