Navarro LLC
Cyber Defense Analyst (3187)
Navarro LLC, Amarillo, Texas, United States, 79161
Navarro Research and Engineering is recruiting a Cyber Defense Analyst
in Amarillo, TX.
Navarro Research & Engineering is an award-winning federal contractor dedicated to partnering with clients to advance clean energy and deliver effective solutions for complex challenges in the nuclear and environmental fields. Joining Navarro means being a part of an exceptional team committed to quality and safety while also looking for innovative strategies to create value for the client's success. Headquartered in Oak Ridge, Tennessee, Navarro has active programs in place across the nation for DOE/NNSA, NASA, and the Department of Defense.
The Cyber Defense Analyst Uses data collected from a variety of cyber defense tools (e.g., IDS alerts, firewalls, network
traffic logs) to analyze events that occur within their environments for the purposes of mitigating threats. Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected security incidents and communicate the event's history, status, and potential impact for further action in accordance with the organization's cyber incident response plan
1. Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources; develop content for cyber defense tools
2. Document and escalate incidents (including event's history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment
3. Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an
observed attack; perform cyber defense trend analysis and reporting
4. Provide daily summary reports of network events and activity relevant to cyber defense practices
5. Receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts
6. Provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from
benign activities
7. Use cyber defense tools for continual monitoring and analysis of system activity to identify potential malicious activity
8. Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information
9. Identify applications and operating systems of a network device based on network traffic
10. Reconstruct a malicious attack or an activity utilizing network traffic
11. Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected security incidents and communicate the event's history,
status, and potential impact for further action in accordance with the organization's cyber incident response plan
Requirements
Education - Technical Field Experience weighted greater than minimum education;
Clearance - desired Q, required L
Due to the nature of the government contract requirements and/or clearances requirements, US citizenship is required.
Navarro is an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender, age, sexual orientation, gender identity, status as a protected veteran, or status as a qualified individual with a disability.
EEO Employer/Vet/Disabled
Benefits
Benefits include medical, dental, and vision insurance; short- and long-term disability insurance; pension benefits*; 401(k) retirement savings plan with employer match; life and accidental death and dismemberment (AD&D) insurance; vacation/sick/holiday pay*.
*Based on eligibility rules
in Amarillo, TX.
Navarro Research & Engineering is an award-winning federal contractor dedicated to partnering with clients to advance clean energy and deliver effective solutions for complex challenges in the nuclear and environmental fields. Joining Navarro means being a part of an exceptional team committed to quality and safety while also looking for innovative strategies to create value for the client's success. Headquartered in Oak Ridge, Tennessee, Navarro has active programs in place across the nation for DOE/NNSA, NASA, and the Department of Defense.
The Cyber Defense Analyst Uses data collected from a variety of cyber defense tools (e.g., IDS alerts, firewalls, network
traffic logs) to analyze events that occur within their environments for the purposes of mitigating threats. Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected security incidents and communicate the event's history, status, and potential impact for further action in accordance with the organization's cyber incident response plan
1. Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources; develop content for cyber defense tools
2. Document and escalate incidents (including event's history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment
3. Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an
observed attack; perform cyber defense trend analysis and reporting
4. Provide daily summary reports of network events and activity relevant to cyber defense practices
5. Receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts
6. Provide timely detection, identification, and alerting of possible attacks/intrusions, anomalous activities, and misuse activities and distinguish these incidents and events from
benign activities
7. Use cyber defense tools for continual monitoring and analysis of system activity to identify potential malicious activity
8. Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information
9. Identify applications and operating systems of a network device based on network traffic
10. Reconstruct a malicious attack or an activity utilizing network traffic
11. Notify designated managers, cyber incident responders, and cybersecurity service provider team members of suspected security incidents and communicate the event's history,
status, and potential impact for further action in accordance with the organization's cyber incident response plan
Requirements
Education - Technical Field Experience weighted greater than minimum education;
Clearance - desired Q, required L
Due to the nature of the government contract requirements and/or clearances requirements, US citizenship is required.
Navarro is an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender, age, sexual orientation, gender identity, status as a protected veteran, or status as a qualified individual with a disability.
EEO Employer/Vet/Disabled
Benefits
Benefits include medical, dental, and vision insurance; short- and long-term disability insurance; pension benefits*; 401(k) retirement savings plan with employer match; life and accidental death and dismemberment (AD&D) insurance; vacation/sick/holiday pay*.
*Based on eligibility rules