Cyber Defense Analyst

Location: Oak Ridge, TN Duration : 1 year with a 1 year option Work Location : Y-12 National Security Complex (a combination of on-site at Y-12 and off-site telework) Clearance : An active DOE Q Clerance is required Q or equivalent active clearance that can reciprocate as Q such as a Top Secret (TS) Clearance KeyLogic has an opening for a Cyber Defense Analyst for the Y-12 National Security Complex in Oak Ridge, TN. This position is responsible for using data collected from a variety of cyber defense tools (e.g., IDS alerts, firewalls, network traffic logs) to analyze events that occur within their environments for the purposes of mitigating threats. Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected security incidents and communicate the event's history, status, and potential impact for further action in accordance with the organization's cyber incident response plan Knowledge, Skillset, and Abilities (KSAs) Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources; develop content for cyber defense tools Document and escalate incidents (including event's history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack; perform cyber defense trend analysis and reporting Provide daily summary reports of network events and activity relevant to cyber defense practices Receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts Provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from benign activities Use cyber defense tools for continual monitoring and analysis of system activity to identify potential malicious activity Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information Identify applications and operating systems of a network device based on network traffic Reconstruct a malicious attack or an activity utilizing network traffic Education : An Associates degree in a technical field and 10-15 years experience, a Bachelors degree in a technical field and 5-10 years of related experience, or a Masters degree in a technical field with 2-5 years experience. About KeyLogic: Supporting critical missions at the intersection of data and science, KeyLogic provides mission management, systems analysis, data analytics, digital transformation, and cybersecurity to customers in the energy, federal civilian, and defense sectors, with a 20 year portfolio of successes supporting DOE, DOC, EPA, DOD, DHS, FBI, and other federal agencies challenged with complex missions. We help our customers solve the world's most challenging problems with unsurpassed anticipatory service. KeyLogic employs over 600 team members, including systems designers, developers, data scientists, IT and cybersecurity specialists, engineers, mission experts, program managers, and more than 70 Ph.D. scientists. This multidisciplinary team works together solving challenging problems with anticipatory service-always staying one step ahead-benefiting our customers, and ultimately helping build a better world. We are committed to the success of each customer's mission. We care enough to make their mission our mission and their success our success. We take technical service delivery to a level above our peers. Our anticipatory service is best-in-class. All qualified applicants will receive consideration for employment at KeyLogic without regard to race; creed; color; religion; national origin; sex; age; disability; sexual orientation; gender identity or expression; genetic predisposition or carrier status; veteran, marital; or any other status protected by law. KeyLogic is proud to be an affirmative action and equal opportunity employer. NOTE: KeyLogic is an Equal Employment/Affirmative Action employer. We do not discriminate in hiring on the basis of sex, gender identity, sexual orientation, race, color, religious creed, national origin, physical or mental disability, protected Veteran status, or any other characteristic protected by federal, state, or local law. If you need a reasonable accommodation for any part of the employment process, please contact us by email at RecruitingKeyLogic.com and let us know the nature of your request and your contact information. Request for accommodation will be considered on a case-by-case basis. Job Code: 2395