Cyber Network Forensic Analyst III

4 months ago

Arlington, United States Nightwing Full time

Date Posted:

2024-04-05

Country:

United States of America

Location:

VA149: 1110 N Glebe Road Arlington 1110 North Glebe Road Suite 630, Arlington, VA, 22201 USA

Position Role Type:

Hybrid

You have been redirected to RTX’s career page as we have recently transitioned from RTX to become a standalone company, which provides us with greater autonomy and opportunities for growth. As a prospective employee of Nightwing, you’ll have the chance to contribute to our continued success and shape the future of our cybersecurity, intelligence, and services offerings.

Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers’ most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets.

Nightwing is supporting a U.S. Government customer to provide support for onsite incident response to civilian Government agencies and critical asset owners who experience cyber-attacks, providing immediate investigation and resolution. Contract personnel perform investigations to characterize of the severity of breaches, develop mitigation plans, and assist with the restoration of services. Nightwing is seeking a Network Forensics Analyst to support this critical customer mission.


Responsibilities:
- Assists the Government lead in coordinating teams in preliminary incident response investigations
- Assists the Government lead with interfacing with the customer while on site
- Determines appropriate courses of actions in response to identified and analyses anomalous network activity
- Assesses network topology and device configurations identifying critical security concerns and providing security best practice recommendations
- Assists with the writing and publishing of Computer Network Defense guidance and reports on incident findings to appropriate constituencies
- Collects network intrusion artifacts (e.g., PCAP, domains, URI’s, certificates, etc.) and uses discovered data to enable mitigation of potential Computer Network Defense incidents
- Analyzes identified malicious network activity to determine weaknesses exploited, exploitation methods, effects on system and information
- Collects network device integrity data and analyze for signs of tampering or compromise
- Assists with real-time CND incident handling (i.e., forensic collections, intrusion correlation and tracking, threat analysis, and advising on system remediation) tasks to support onsite engagements

Required Skills:
- U.S. Citizenship
- Must have an active TS/SCI clearance
- Must be able to obtain DHS Suitability
- 8+ years of directly relevant experience in network investigations
- In depth knowledge of CND policies, procedures and regulations
- In depth knowledge of TCP/IP protocols
- In depth knowledge of standard protocols – ICMP, HTTP/S, DNS, SSH, SMTP, SMB, NFS, etc.
- In depth knowledge and experience of Wifi networking
- In depth knowledge and experience of network topologies - DMZ’s, WAN’s, etc.
- Substantial knowledge of Splunk (or other SIEM’s)
- Understanding of MITRE Adversary Tactics, Techniques and Common Knowledge (ATT&CK)
- Knowledge of Computer Network Defense policies, procedures, and regulations
- Knowledge of defense-in-depth principles and general attack stages with respect to network security architecture
- Ability to characterize and analyze network traffic to identify anomalous activity and potential threats to network resources
- Ability to identify and analyze anomalies in network traffic using metadata
- Experience with reconstructing a malicious attack or activity based on network traffic
- Experience examining network topologies to understand data flows through the network
- Must be able to work collaboratively across physical locations

Desired Skills:
- Substantial knowledge of network device integrity concepts and methodologies
- Proficiency with network analysis software (e.g. Wireshark)
- Proficiency with carving and extracting information from PCAP data
- Proficiency with non-traditional network traffic (e.g. Command and Control)
- Proficiency with preserving evidence integrity according to standard operating procedures or national standards
- Proficiency with designing cyber security systems and environments in a Linux and/or Windows environment
- Proficiency with virtualized environments

Required Education:
BS Computer Science, Cyber Security, Computer Engineering, or related degree; or HS Diploma & 10+ years of network investigations experience.

Desired Certifications:
- DoD 8140.01 IAT Level II, IASAE II, CSSP Analyst
- DoD 8140.01 GCIA, GCIH, CSSP Analyst/CSSP Incident Responder
- DoD 8140.01 CEH, CSSP Analyst
- SANS GIAC GNFA preferred

Arlington, VA

Previously part of a leading Fortune 100 company and headquartered in Dulles, VA; Nightwing became independent in 2024 but continues to support the nation’s most mission impactful initiatives.

When we formed Nightwing, we brought a deep set of credentials and an unfaltering commitment to the mission. For over four decades, our team has been providing some of the world’s most technically advanced full-spectrum cyber, data operations, systems integration and intelligence support services to the U.S. government on its most important missions.

At Nightwing, we value collaboration and teamwork. You’ll have the opportunity to work alongside talented individuals who are passionate about what they do. Together, we’ll leverage our collective expertise to drive innovation, solve complex problems, and deliver exceptional results for our clients.

Thank you for considering joining us as we embark on this new journey and shape the future of cybersecurity and intelligence together as part of the Nightwing team.

The salary range for this role is 96,000 USD - 200,000 USD. The salary range provided is a good faith estimate representative of all experience levels. RTX considers several factors when extending an offer, including but not limited to, the role, function and associated responsibilities, a candidate’s work experience, location, education/training, and key skills.

Hired applicants may be eligible for benefits, including but not limited to, medical, dental, vision, life insurance, short-term disability, long-term disability, 401(k) match, flexible spending accounts, flexible work schedules, employee assistance program, Employee Scholar Program, parental leave, paid time off, and holidays. Specific benefits are dependent upon the specific business unit as well as whether or not the position is covered by a collective-bargaining agreement.

Hired applicants may be eligible for annual short-term and/or long-term incentive compensation programs depending on the level of the position and whether or not it is covered by a collective-bargaining agreement. Payments under these annual programs are not guaranteed and are dependent upon a variety of factors including, but not limited to, individual performance, business unit performance, and/or the company’s performance.

This role is a U.S.-based role. If the successful candidate resides in a U.S. territory, the appropriate pay structure and benefits will apply.

RTX anticipates the application window closing approximately 40 days from the date the notice was posted. However, factors such as candidate flow and business necessity may require RTX to shorten or extend the application window.

RTX is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.

Privacy Policy and Terms:

Click on this link to read the Policy and Terms

  • Cyber Network Defense Analyst III

    4 weeks ago

    Arlington, Virginia, United States Nightwing Full time

    About the Role:Cyber Network Defense Analyst III is a critical position at Nightwing, where you will play a key role in supporting the nation's most mission-impacting initiatives. As a Cyber Network Defense Analyst III, you will be responsible for correlating forensic findings to network events, performing forensic triage, and tracking and documenting...

  • Cyber Host Forensic Analyst III

    4 weeks ago

    Arlington, Virginia, United States Raytheon Technologies Full time

    Job SummaryWe are seeking a highly skilled Cyber Host Forensic Analyst III to support our critical customer mission. As a key member of our team, you will be responsible for assisting federal leads with overseeing and leading forensic teams at onsite engagements, providing technical assistance on digital evidence matters, and writing in-depth...

  • Cyber Forensic Analyst

    4 weeks ago

    Arlington, Virginia, United States Nightwing Full time

    Job SummaryNightwing is seeking a skilled Cyber Host Forensic Analyst to support a critical customer mission. The ideal candidate will have 2+ years of experience in cyber forensic investigations using leading edge technologies and industry standard forensic tools.Key ResponsibilitiesAcquiring and collecting computer artifacts, correlating forensic findings...

  • Cyber Forensics Analyst

    4 weeks ago

    Arlington, Virginia, United States Gray Tier Technologies LLC Full time

    Gray Tier Technologies LLC is seeking a Cyber Forensics Analyst to support the DHS Hunt and Incident Response Team (HIRT).This team secures the Nation's cyber and communications infrastructure while providing front line response for cyber incidents and hunting for malicious cyber activity.Our team performs HIRT investigations to develop a diagnosis of the...

  • Cyber Network Forensic Analyst II

    4 weeks ago

    Arlington, Virginia, United States Nightwing Full time

    Job SummaryAt Nightwing, we are seeking a highly skilled Cyber Network Forensic Analyst II to join our team. As a Cyber Network Forensic Analyst II, you will be responsible for conducting thorough investigations of network security incidents, analyzing network traffic, and identifying potential threats to our customers' networks.Responsibilities* Assist the...

  • Cyber Forensic Analyst IV

    4 weeks ago

    Arlington, Virginia, United States Nightwing Full time

    Job Summary:At Nightwing, we are seeking a highly skilled Cyber Forensic Analyst IV to join our team. As a Cyber Forensic Analyst IV, you will be responsible for leading forensic teams at onsite engagements, providing technical assistance on digital evidence matters, and writing in-depth reports. You will also be responsible for supporting forensic analysis,...

  • Cyber Network Forensic Analyst IV

    4 weeks ago

    Arlington, Virginia, United States Raytheon Full time

    Job Summary:As a Cyber Network Forensic Analyst at Nightwing, you will play a critical role in supporting our customer's mission by conducting thorough investigations of cyber-attacks and providing expert analysis to characterize the severity of breaches and develop mitigation plans. You will work collaboratively across physical locations to assist with the...

  • Cyber Host Forensic Analyst II

    4 weeks ago

    Arlington, Virginia, United States Raytheon Technologies Full time

    Job SummaryWe are seeking a highly skilled Cyber Host Forensic Analyst to support our critical customer mission. As a Cyber Host Forensic Analyst, you will be responsible for acquiring and collecting computer artifacts, assessing evidentiary value, and correlating forensic findings with network events. You will also be responsible for performing incident...

  • Cyber Network Defense Analyst III

    4 weeks ago

    Arlington, Virginia, United States Nightwing Full time

    About the Role:Nightwing is seeking a highly skilled Cybersecurity Threat Hunter to join our team. As a Cybersecurity Threat Hunter, you will be responsible for identifying and mitigating cyber threats to our customers' networks and systems.Key Responsibilities:Correlate forensic findings to network events to develop an intrusion narrativeCollect and...

  • Cyber Forensic Analyst IV

    4 weeks ago

    Arlington, Virginia, United States Nightwing Full time

    Job Summary:Nightwing is seeking a highly skilled Cyber Forensic Analyst IV to support our critical customer mission. As a key member of our team, you will be responsible for leading forensic teams at onsite engagements, providing technical assistance on digital evidence matters, and writing in-depth reports.Responsibilities:Assisting Federal leads with...

  • Cyber Host Forensic Analyst II

    4 weeks ago

    Arlington, Virginia, United States Nightwing Full time

    About the Role:Nightwing is seeking a skilled Cyber Host Forensic Analyst to support our critical customer mission. As a member of our team, you will be responsible for acquiring and collecting computer artifacts, assessing evidentiary value, and correlating forensic findings with network events.Responsibilities:Acquiring and collecting computer artifacts...

  • Cyber Network Defense Analyst IV

    1 month ago

    Arlington, Virginia, United States Argo Cyber Systems Full time

    Job Title: Cyber Network Defense Analyst IVArgo Cyber Systems is seeking a highly skilled Cyber Network Defense Analyst IV to join our team. As a key member of our cybersecurity team, you will be responsible for monitoring and analyzing network activity to identify potential threats and protect our systems and data.Key Responsibilities:Characterize and...

  • Cyber Network Defense Analyst IV AP

    4 weeks ago

    Arlington, Virginia, United States Nightwing Full time

    About the Role:We are seeking a highly skilled Cyber Network Defense Analyst IV AP to join our team at Nightwing. As a Cyber Network Defense Analyst IV AP, you will be responsible for analyzing and mitigating cyber threats to our customers' networks.Key Responsibilities:Acquire and collect computer artifacts in support of onsite engagementsTriage electronic...

  • Deputy Cyber Incident Response Team Manager

    1 month ago

    Arlington, Virginia, United States Argo Cyber Systems Full time

    Job SummaryWe are seeking a highly skilled Deputy Cyber Incident Response Team Manager to join our team at Argo Cyber Systems. As a key member of our Cyber Defense Mission, you will play a critical role in ensuring exceptional service for our managed services customers and driving employee engagement for our CIRT staff members.Key ResponsibilitiesSupport the...

  • Cyber Network Forensic Analyst IV

    4 weeks ago

    Arlington, Virginia, United States Nightwing Full time

    About the Role:Nightwing is seeking a highly skilled Cyber Network Forensic Analyst IV to join our team. As a key member of our cybersecurity team, you will be responsible for conducting network investigations, analyzing network traffic, and identifying potential threats to our systems.Responsibilities:Assist the Government lead in coordinating teams in...

  • Cyber Network Defense Specialist

    4 weeks ago

    Arlington, Virginia, United States Nodel Full time

    Cyber Network Defense and Cloud Forensics RoleAt Node, we are seeking a highly skilled Cyber Network Defense Analyst with expertise in Cloud Forensics to support our critical customer mission. This role requires a strong understanding of cloud development and automation tools, as well as experience in acquiring, processing, and analyzing digital evidence...

  • Cyber Network Defense Analyst Level III

    6 months ago

    Arlington, United States Zachary Piper Solutions Full time

    The DHS’s Hunt and Incident Response Team (HIRT) secures the Nation’s cyber and communications infrastructure. HIRT provides DHS’s front-line response for cyber incidents and proactively hunting for malicious cyber activity. Zachary Piper Solutions, as a prime contractor to DHS, performs HIRT investigations to develop a preliminary diagnosis of the...

  • Cyber Host Forensic Analyst III

    4 months ago

    Arlington, United States Nightwing Full time

    Date Posted:2024-04-05Country:United States of AmericaLocation:VA149: 1110 N Glebe Road Arlington 1110 North Glebe Road Suite 630, Arlington, VA, 22201 USAPosition Role Type:HybridYou have been redirected to RTX’s career page as we have recently transitioned from RTX to become a standalone company, which provides us with greater autonomy and opportunities...

  • Cyber Network Forensic Analyst IV

    4 months ago

    Arlington, United States Nightwing Full time

    Date Posted:2024-04-05Country:United States of AmericaLocation:VA149: 1110 N Glebe Road Arlington 1110 North Glebe Road Suite 630, Arlington, VA, 22201 USAPosition Role Type:HybridYou have been redirected to RTX’s career page as we have recently transitioned from RTX to become a standalone company, which provides us with greater autonomy and opportunities...

  • Cyber Network Defense Specialist

    4 weeks ago

    Arlington, Virginia, United States ARSIEM Corporation Full time

    About ARSIEM CorporationAt ARSIEM Corporation, we strive to deliver cutting-edge technical solutions to our government clients. Our team of experienced professionals is committed to providing exceptional support and fostering a trusted partnership with our clients.We are seeking a highly skilled Cyber Network Defense Analyst to join our team in Arlington,...