Computer Network Defense, Lead

Be Challenged and Make a Difference

In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture.

Description of Task to be Performed: AnaVation is seeking a Cyber Security SME responsible for the overall security defense and monitoring of the enterprise environment of critical information technology services across multiple security domains and delivery platforms. This includes, but is not limited to, responding to alerts from HBSS, administering security IPS/IDS tools, addressing triggers and events from SIEM systems, responding to incident response events, and generating reports related to the state of network security and threat activity. This role strengthens the defensive posture and cyber defense operational readiness of the customer’s enterprise to protect against external cyber attacks and insider threats which could potentially cause damage to the data, systems, or networks.

Clearance: Active TS/SCI with CI Poly Education: BA/BS in Computer Science, Cybersecurity, or another related field Certifications: DoD 8570 IAT Level III Location: Bethesda, MD Experience: Minimum of 7 years related professional work experience Minimum 5 years working in the fields of CND and incident response Experience managing IPS/IDS tools Experience conducting ACAS scans Experience conducting incident response actions from alerts on a SIEM Experience using Tableau to render data into summary reports Experience providing security posture, threat, and risk reports and briefings to leadership Support in the establishment and maintenance of the CMDB to ensure accurate tracking of assets and configurations. Provides support to an organization, system, or enclave’s information assurance program. Experience leading defensive cyber operations teams or coordinating multi-platform CND activities Ability to correlate and analyze security data across endpoint, network, and cloud environments to drive incident response decisions Experience developing or improving SOPs, playbooks, and workflows for CND and cyber incident response

Clearance: Active TS/SCI with CI Poly Education: MS in Computer Science, Cybersecurity, or another related field Experience: 10+ years related professional work experience 7+ years working in the fields of CND, risk management, and continuous management of security tools Experience conducting cyber-attack analysis Experience conducting Battle Damage Assessments after a cyber-attack Experience detecting and mitigating insider threat Provides security certification test and evaluation of assets, vulnerability management and response, security assessment, and customer support. Documenting network schemas and cyber operation tool solutions Experience briefing cyber risk, defensive posture, and operational priorities to senior leadership Familiarity with enterprise-level cyber defense architecture and integration across SIEM, IDS/IPS, EDR, and vulnerability management platforms Demonstrated ability to mentor junior analysts and guide technical teams during cyber incidents

laptop-ats-crawler v3