Network Based Systems Analyst IV

{
  "content_hash": "85877848cbbd76bd8914390ea2133caf2c9551817e3a3dbb3c2aa3a2be2ca32f",
  "source_hash": "9c8751db9139ba6fbe302fd7a921f13996dd38f362e21737ba342a303f4c0d33",
  "last_changed_at": "2026-05-29T07:08:33.097Z",
  "active_status": "active"
}

{
  "language": "en",
  "location": {
    "raw": "Arlington, VA",
    "city": "Arlington",
    "region": "VA",
    "country": "United States",
    "is_remote": false,
    "confidence": 0.9
  },
  "salary_max": null,
  "salary_min": null,
  "inferred_at": "2026-06-06T18:44:29.864Z",
  "launch_scope": {
    "reason": "english_us_canada",
    "included": true,
    "language": "en",
    "location": {
      "raw": "Arlington, VA",
      "city": "Arlington",
      "region": "VA",
      "country": "United States",
      "is_remote": false,
      "confidence": 0.9
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": null,
  "salary_period": null,
  "workplace_type": "on_site",
  "salary_currency": null
}

{}

{
  "lists": [
    {
      "text": "Responsibilities",
      "content": "\n<li>Assists the Government lead in coordinating teams in preliminary incident response investigations</li>\n<li>Assists the Government lead with interfacing with the customer while on site</li>\n<li>Determines appropriate courses of actions in response to identified and analyses anomalous network activity</li>\n<li>Assesses network topology and device configurations identifying critical security concerns and providing security best practice recommendations</li>\n<li>Assists with the writing and publishing of Computer Network Defense guidance and reports on incident findings to appropriate constituencies</li>\n<li>Collects network intrusion artifacts (e.g., PCAP, domains, URI’s, certificates, etc.) and uses discovered data to enable mitigation of potential Computer Network Defense incidents</li>\n<li>Analyzes identified malicious network activity to determine weaknesses exploited, exploitation methods, effects on system and information</li>\n<li>Assists with real-time CND incident handling (i.e., forensic collections, intrusion correlation and tracking, threat analysis, and advising on system remediation) tasks to support onsite engagements</li>\n<li>Provide technical briefings as required</li>\n"
    },
    {
      "text": "Minimum Qualifications",
      "content": "\n<li>BS Computer Science, Cyber Security, Computer Engineering, or related degree; or HS Diploma &amp; 10+ years of network investigations experience.</li>\n<li>8+ years of directly relevant experience in network investigations</li>\n<li>In-depth knowledge of CND policies, procedures, and regulations</li>\n<li>In-depth knowledge of standard protocols – ICMP, HTTP/S, DNS, SSH, SMTP, SMB, NFS, TCP/IP</li>\n<li>In-depth knowledge and experience of Wifi networking&nbsp;</li>\n<li>In-depth knowledge and experience of network topologies, DMZs, WANs, etc.</li>\n<li>Substantial knowledge of Splunk (or other SIEMs)</li>\n<li>Understanding of MITRE Adversary Tactics, Techniques and Common Knowledge (ATT&amp;CK)</li>\n<li>Knowledge of Computer Network Defense policies, procedures, and regulations</li>\n<li>Knowledge of defense-in-depth principles and general attack stages with respect to network security architecture</li>\n<li>Ability to characterize and analyze network traffic to identify anomalous activity and potential threats to network resources</li>\n<li>Ability to identify and analyze anomalies in network traffic using metadata</li>\n<li>Experience with reconstructing a malicious attack or activity based on network traffic</li>\n<li>Experience examining network topologies to understand data flows through the network</li>\n<li>Must be able to work collaboratively across physical locations</li>\n"
    },
    {
      "text": "Preferred Qualifications",
      "content": "\n<li>Substantial knowledge of network device integrity concepts and methodologies</li>\n<li>Proficiency with network analysis software (e.g., Wireshark)&nbsp;&nbsp;</li>\n<li>Proficiency with carving and extracting information from PCAP data&nbsp;</li>\n<li>Proficiency with non-traditional network traffic (e.g., Command and Control)&nbsp;&nbsp;</li>\n<li>Proficiency with preserving evidence integrity according to standard operating procedures or national standards</li>\n<li>Proficiency with virtualized environments</li>\n<li>DoD <a href=\"http://8140.01\">8140.01</a> IAT Level II, IASAE II, CSSP Analyst, GCIA, GCIH, CSSP Analyst/CSSP Incident Responder, CEH&nbsp;</li>\n<li>SANS GIAC GNFA preferred</li>\n"
    }
  ],
  "country": "US",
  "createdAt": 1762276181740,
  "updatedAt": null,
  "categories": {
    "team": "0008-0003",
    "location": "Arlington, VA",
    "commitment": "Full-time",
    "department": "Systems Analyst",
    "allLocations": [
      "Arlington, VA"
    ]
  },
  "salaryRange": null,
  "workplaceType": "onsite"
}