Network Security Analyst Ii

Job Summary

Battelle's Cyber team is seeking a Network Security Analyst II to collect information, identify vulnerabilities, analyze risk to mission, and address cyber security issues in computer networks and systems. The position location is our Chantilly, VA office. Travel to the Pentagon, Columbus OH, and/or other Customer locations may be necessary based on program or customer needs.

A Network Security Analyst at Battelle is knowledgeable on commodity network systems, infrastructure, layered defense, and operation of transmission of data across wide area and local networks. Network Security Analysts are experts in the OSI model, anatomy of an attack, and have knowledge of encryption. This job is right if you have a passion for continuous learning and solid understanding of networks in the form of TCP/IP, packet structure, protocol characteristics, troubleshooting anomalous network behavior, and designing solutions with a team of experts operating in a variety of environment (e.g., mobile, deployed, fixed, cloud).

"From Silicon to Systems" - We are an elite, multi-disciplinary team, bringing together the brightest minds from physics, computer science, electrical engineering, and mathematics to develop unique cyber security solutions for government and industrial customers. Battelle has been trusted by elite government clients to solve some of the world's hardest security problems. We work in small agile teams to push the bounds of computing technology. Our high-powered labs include specialized software and hardware, so our engineers have everything they need to invent new cyber solutions.

We encourage innovative ideas with our large Internal Research and Development (IR&D) program where engineers work on projects they are passionate about. Inventors and innovators are rewarded by our industry-leading intellectual property compensation program. Our group works collaboratively with many parts of Battelle's larger organization on projects ranging from genomics to robotics.

Battelle Cyber Online
GitHub: https://github.com/Battelle
Battelle Cyber Challenge: https://battellecyberchallenge.org/
Battelle Cyber: https://www.youtube.com/watch?v=XqMuKsqH9wc

Responsibilities

• Create reports to document observations, remediation, and recommended actions.
• Assist with on-site surveys, mission planning, and deployment process.
• Maneuver within network infrastructure to isolate, characterize and categorize network anomalies to help determine root source/root cause.
• Research emerging trends in networking technology and related exploits.
• Conduct full packet capture (PCAP) collection and analysis, network device configuration interpretation and hardening by employing a mobile, on-network cyber assessment toolkit utilizing terminal access point (TAP), commercial and open-source sensors and analytic tools.
• Provide informal technical briefings on testing or experimental results to team members.
• Support simulating adversarial techniques in a lab and collect data to help develop detection approaches.
• As part of a project team, identify, analyze, remediate network vulnerabilities and issues on any network of interest.

Key Qualifications

• Ability to capture and analyze substantial amounts of network traffic.
• Familiarity with scripting languages to facilitate tool application (e.g., PowerShell, Python).
• Experience with configuration management/modification of network devices (routers, switches).
• Current industry certifications related to the field, e.g., (GCIH, GPEN, CEH, etc.)
• Travel may be as frequent as two weeks every two months.
• Understanding of commodity networking applications (e.g., DNS, Active Directory).
• Firsthand experience with commercial and open-source assessment tools (e.g., Elastic, Security Onion, Zeek, Suricata, Wireshark)
• Understanding of networking and security concepts (e.g., TCP/IP stack, routing, firewalls, intrusion detection systems, intrusion prevention systems).
• Cyber Blue or Red Team member, on-network auditor or assessor, or SOC/NOC technician with a minimum of 3 years of experience.
• Familiarity with IP networking concepts (e.g., virtual private networks, tunneling, layering, defense in depth).
• Ability to communicate technical concepts to teammates.
• Ability to obtain and maintain a Top-Secret security clearance.
• Bachelor's degree in Computer Science or a related field with 2 years of experience or master’s degree in related field; or an equivalent combination of education and or experience in a related field.

Preferred Qualifications

• Experience with applying frameworks to cyber security (e.g., MITRE ATT&CK, NIST)
• Experience with Linux, Microsoft Windows desktop and server, as well as virtualization environments like VMware ESXi/vSphere.
• Experience with system administration tasks (e.g., patching, user and domain administration).
• Familiarity with data science and machine learning techniques.
• Top Secret security clearance
• Familiarity with procedural and object-oriented programming languages.