Network Threat Support Specialist - Mid TS/SCI wPOLY

  • Leidos,
  • Annapolis Junction, MD
Analysis, Analyst, CCNA, CISSP, Cisco, Development, DNS, Linux, Networks, Security, SSL, Testing, Unix, VMware, Windows
Full Time
Telecommuting not available Travel not required

Job Description

Job Description:


The Network Threat Support Specialist will perform analysis to support cyber operation. The NTSS will serve as a member of a computer network operations (CNO) intelligence team, focused on the threat to networked weapons platforms and US and DoD information networks. The NTSS will collaborate with analytical counterparts across the U.S. Intelligence Community; apply knowledge of threat environment, open-source tools, and current implementation of threat technologies in order to devise all-source analytic/collection strategies to pursue access and exploitation of targets of interest.


Provide malware first-look and triage analysis and signature development support to a 24x7 watch operations. Included are network forensics and malware analysis activities such as:

Setting up virtual machines in VMware

Capturing file system and memory changes of an operating (victim) host

Identification of patterns and comparing them to known malware patterns and TTPs (threats, tactics and procedures)

Very familiar with implant types and/or open source equivalents, i.e. various Trojan implants, BOTS, and malware stages.

Determining hard-coded command and control node IP addresses/DNS names.

Able to perform decode, de-obfuscation and SSL decryption steps with tools.

Able to work in team environment with strong communication skills for working with both internal and external customers.

Has an understanding of malware analyst customers within DOD and other Federal agencies.



Bachelor's degree and/or equivalent formal military training with 4-8 years of related experience.

Work experience must include 4+ years of Intelligence analysis experience within the DoD/IC.

Preferred Tools/Experience:

Wireshark/Ethereal (tcpdump), Snort signature writing, YARA signature writing, intrusion detection (various), forensics work at host, network, or software levels, penetration testing work, malware triage analysis, malware reversing, IDA Pro, MetaSploit, EnCase, Ollydebug, advanced Windows and Linux/Unix OS experience.

Preferred Certifications: GCFIH, CNDA, DoD Forensic Examiner and/or Network Intrusion Analyst, Security +, SSCP, Cisco CCNA (and other Cisco related network certs), Network +, CISSP, GSEC, GCIA, GPEN, GCFW, GCFA

External Referral Eligible


Dice Id : SCNCAPI2
Position Id : R-00004522
Have a Job? Post it

Similar Positions

Cyber Intel Analyst (TS/SCI)
  • By Light Professional IT Services, Inc.
  • Fort Meade, MD
Cyber Watch Officer
  • Wholepoint Systems
  • Md
CNMF Mid-Level All Source Analyst
  • TAD PGS, Inc.
  • Fort George G Meade, MD
SIGINT/Cyber Intelligence Analyst
  • Redhorse Corporation
  • Arlington, VA
Emerging Threat Analyst
  • Cornerstone RPO
  • Bowie, MD
Sr Computer Forensics Imaging and Extraction Analyst
  • CACI International, Inc.
  • Linthicum, MD
Digital Forensics Analyst
  • Capital Markets Placement
  • Arlington, VA
Senior Incident Response Consultant
  • BeecherMadden
  • Washington, DC
Network Analyst, Mid
  • Booz Allen Hamilton
  • Annapolis Junction, MD
SOC Cybersecurity Network Engineer III
  • Raytheon
  • Annapolis Junction, MD
Cyber Force Development Specialist
  • VMD Corp
  • Arlington, VA