Cyber Network Defense Analysis Tech (Cyber Network Analysis Tech 1) 19371

Come Join HII! Where Hard Stuff is Done Right

Huntington Ingalls Industries is seeking a Cyber Network Defense Analysis Technician, to join our team of highly qualified, diverse cybersecurity professionals, and take on security operations center tasks critical to the growth and success of the company. We are looking for someone who will be responsible for monitoring, detecting, responding, and resolving security alerts and incidents. The incumbent will interface with Business Information Security Officers, Technical Managers, and other peers to provide technical and analytical support of security alerts; enforce compliance of policies, procedures and work instructions; perform alert triage, alert monitoring, incident response, change and configuration management, and service level performance. This role offers a unique opportunity for candidates to take part in maintaining and building an Enterprise Cybersecurity Operations Center which directly affects our overall security posture and success. 

Responsibilities: I want to and can do that!

•    Performs assessments of systems and networks within the networking environment or enclave and identifies systems and networks that deviate from acceptable configurations, enclave policy, or local policy. 
•    Evaluates incident response procedures and capabilities. 
•    Exploits system and network vulnerabilities and misconfigurations for purposes of gathering data from target or adversary automated information systems or networks and to enable operations and intelligence collection capabilities. 
•    Leverages computer networks to disrupt, deny, degrade, or destroy information resident in computers and computer networks, or the computers and networks themselves.
•    Interfaces and utilizes various Cybersecurity tools and platforms which includes:
o    SIEM & SOAR technology
o    SPLUNK logging and analysis
o    TRELLIX End Point Protection
o    Vulnerability Scanning
o    Google Cloud Platform
o    AWS
o    System monitoring and performance tuning
•    Provide 24x7 security application support (1 of 3 rotating shifts)
 

What you must have!

•    0 years experience with Bachelors in related field; or High School Diploma or equivalent and 4 years relevant experience.
•    SIEM and SOAR familiarity (Preferably Splunk or Google platforms)
•    Escalation and Triage of events and alerts being monitored through various technology platforms
•    Experience developing detections/alerts (fine tuning and analysis)
•    SEC+ certification
•    Scripting language and experience; e.g.  Microsoft PowerShell
•    Creating and maintaining security policy and procedures
•    High level proficiency in Security Event Information Management tools; preferably in a large enterprise supporting more than 5,000 users.
•    High knowledge in identifying and resolving issues across multiple environments (Linux, Windows, VMware, MS Azure, Amazon Web Services)
•    High knowledge and proficiency with Active Directory, DNS, Kerberos, Claims Authentication, and VMWare virtualization technologies.
•    High knowledge in computer security techniques
•    High knowledge with scripting proficiency in UNIX Shell or Perl
•    Strong oral and written communications skills
•    Excellent customer service skills
 

Preferred Requirements

•    Desirable to have Certifications in the field of Security Applications and other associated fields of study
•    Scripting language and experience; e.g.  Microsoft PowerShell
•    Creating and maintaining security policy and procedures
•    High level proficiency in Security Event Information Management tools; preferably in a large enterprise supporting more than 5,000 users.
•    High knowledge in identifying and resolving issues across multiple environments (Linux, Windows, VMware, MS Azure, Amazon Web Services)
•    High knowledge and proficiency with Active Directory, DNS, Kerberos, Claims Authentication, and VMWare virtualization technologies.
•    High knowledge in computer security techniques
•    High knowledge with scripting proficiency in UNIX Shell or Perl
 

Physical Requirements