Computer Network Defense Analyst - CND Analyst

Location: Fully On-site in Columbus, OH;

Employment Type: Full-time.

Clearance Required: Active Top Secret

Shift/work hours: This position would be working on the 2nd shift - 4 PM- 12:30 AM

Salary: $120,000-$125,000.

Who we are:

Horizon Industries Limited (Horizon) is a dynamic IT and Management Consulting firm based in the Washington, DC area. Founded in 1996, Horizon Industries Limited (Horizon) has evolved into a company of highly qualified professionals that provides full-cycle IT consulting and Management support in both the private and public sectors.

Horizon’s culture is based on our core values, and we PRIDE ourselves on a diverse, employee- and family-centric approach.

Summary of requirements

5 years relevant Cybersecurity/IT experience
IAT II: One of the following
CCNA-Security; CySA+; GICSP; GSEC; Security+ CE; CND; SSCP
CNDSP/CSSP-IR
Must have one of the “Computer Network Defense” CE Certifications within six (6) months of onboarding.

What are we are looking for

We are looking for a CND Analyst that will:

Participates in 24x7x365 monitoring DLA's SIEM and other cybersecurity monitoring tools in an effort to detect and respond to cybersecurity threats within DLA's Enterprise Network Environment.
Performs actions to protect, monitor, detect, analyze, and respond to unauthorized activity.
Employs Cybersecurity capabilities and deliberate actions to respond to specific alerts or emerging threats.
Reviews logged events for trends that are indicative of attack or compromise within the environment.
Actively monitors logs and traffic for Advanced Persistent Threats (APT) and "low and slow" attacks within the environment.
Maintains awareness of possible threats through the use of intelligence resources to include Open-Source Intelligence (OSINT).
Provides technical analysis and sustainment support for the enterprise for IA tools and applications and assists with the application of Defense-In-Depth signatures and perimeter defense controls to diminish network threats.

Required Skills / Experience

Five (5) years of relevant IT experience.
Two (2) years performing root cause analysis of cybersecurity events and incidents
Working knowledge of at least at least two types of security tools:
Firewall
IDS/IPS
Host based antivirus
Data loss prevention
Vulnerability Management
Forensics
Malware Analysis
Device Hardening
Understanding of Defense-in-Depth
Ability to build scripts and tools to enhance threat detection and incident response capabilities (Preferably in SPL, Python, PowerShell)
Must possess a DOD Top Secret Clearance.
Must possess a relevant certification meeting the DOD 8570.01 IAT level II. One of the following:
CCNA-Security
CySA+
GICSP
GSEC
Security+ CE
CND
SSCP
Must maintain CNDSP/CSSP-IR
Must have one of the “Computer Network Defense” CE Certifications within six (6) months of onboarding.

Project Overview

This project supports DLA Cybersecurity in performing CSSP functions for DLA to include but not limited to performing incident response and cybersecurity content development focused on but not limited to externally hosted programs and applications. Coordinates with DLA stakeholder groups to ensure incident handling is conducted across the enterprise to protect DLA data, networks, applications both internally and externally hosted in accordance with DoD directives.

Program Overview

The JETS Program provides the full range of IT services, technical and management expertise that support applications, software, hardware, infrastructure, and systems, across the DLA IT Enterprise. Support is provided for information technology solutions, technical support, maintenance, and sustainment; operations support; application development, maintenance, and technical support; and lifecycle management. Additionally, the program also supports administrative program management support for IT program offices and DLA Information Operations (J6) Office. The program provides support technology services across the DLA Information Operations Enterprise, the DLA Program Executive Offices (PEO), and all other technology services currently supported through DLA Contracting Services Office (DCSO) acquisitions.