Information Assurance Analyst - Secret Clearance Job - Full-time / Part-time

Information Assurance Analyst needed for a contract to hire opportunity with Yoh's client located in Fort Lee, Virginia.

Please be aware that many of our positions require a security clearance, or the ability to obtain one.

The Big Picture - Top Skills You Should Possess:

- Must be eligible to work in the US for any employer
- Ability to obtain a security clearance
- Security + Certification

What You'll Be Doing:

- Monitor, detect, analyze, investigate, report, and track security-related "events" such as signs of intrusion, compromise, misuse, and compliance
- Utilize provided sensors, systems, tools to monitor networks and systems for signs of intrusion, compromise, misuse, and non-compliance
- Proactively monitor and track down anomalies, non-compliant systems, and other observed events that are detrimental to the overall security posture of the IT infrastructure
- Support detection of vulnerabilities and sophisticated and nuanced attacks, discern and remove false positives, and analyze the information generated by systems
- Support scanning of devices on the network for network and system vulnerabilities
- Support daily analysis of security logs to detect incidents
- Support generation of metrics and reporting on a regular basis
- Performing additional tasks or duties as assigned.
- Perform analysis of log files from a variety of sources within the Network Enclave (NE) or enclave, to include individual host logs, network traffic logs / packet captures, firewall logs, and intrusion detection system logs at least daily
- Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources
- Assist in the construction of signatures which can be implemented on CND network tools in response to new or observed threats within the NE or enclave
- Monitor appropriate security bulletins and report any security issues that may impact the IDS to the DeCA Computer Network Defense Service Provider (CNDSP) Manager, CNDSP Incident Responders, DeCA CIRT Lead, other CNDSP related personnel and DeCA Information Assurance personnel
- IDS logs, databases, and security incident response reports are to be prepared and maintained
- Receive and analyze network alerts from various sources within the NE or enclave and determine possible causes of such alerts
- Review and respond to events identified in the Host-Based Security System (HBSS)
- Coordinate with enclave CND staff to validate network alerts
- Notify CND managers, CND incident responders, and other CND-SP team members of suspected CND incidents and articulate the event's history, status, and potential impact for further action
- An analysis of any suspicious internal and/or external action must be accomplished and reported to DeCA CNDSP management based on established guidelines
- Perform event correlation using information gathered from a variety of sources within the NE or enclave to gain situational awareness and determine the effectiveness of an observed attack

What You Need to Bring to the Table:

- Bachelors degree (or the equivalent)
- Minimum of two (2) years experience working in an Network Operations Center or another service center in which the primary responsibility is in collecting, analyzing, interpreting information, and remediation of incidents/events.
- At least one year experience with information systems and managing records projects using both electronic and manual systems.
- DoD 8570 IAT Level II - Security +
- DoD 8570 CNDSP Analyst - CEH, GCIH, or GCIA

Bonus Points! Otherwise Known As Preferred Qualifications:

- Demonstrated knowledge of IA and CND principles, concepts, and methodology.
- IBM (ISS) RealSecure SiteProtector, AirDefense, Host Based Security System (HBSS), RSA EnVision, BlueCoat, Wireshark, Splunk, Sourcefire, and Gigamon
- CCNA

What are you waiting for? Apply Now!

Yoh makes finding and applying for jobs simple. Partner with Yoh to find the right opportunities across multiple industries in the US and UK. Find out more !

Yoh, a Day & Zimmermann company, is an Equal Opportunity Employer, M/F/D/V. to contact us if you are an individual with a disability and require accommodation in the application process.

J2W: INFOTECH

TAX TERM: CON_HIRE_W2

Ref: 1053633

YFS/Aviation: IT & Telecom