Computer Network Defense, Lead

Description of Task to be Performed:

AnaVation is seeking a Cyber Security SME responsible for the overall security defense and monitoring of the enterprise environment of critical information technology services across multiple security domains and delivery platforms. This includes, but is not limited to, responding to alerts from HBSS, administering security IPS/IDS tools, addressing triggers and events from SIEM systems, responding to incident response events, and generating reports related to the state of network security and threat activity. This role strengthens the defensive posture and cyber defense operational readiness of the customer’s enterprise to protect against external cyber attacks and insider threats which could potentially cause damage to the data, systems, or networks.

Required Qualifications:

• Clearance: Active TS/SCI with CI Poly
• Education: BA/BS in Computer Science, Cybersecurity, or another related field
• Certifications: DoD 8570 IAT Level III
• Location: Bethesda, MD
• Experience:
• Minimum of 7 years related professional work experience
• Minimum 5 years working in the fields of CND and incident response
• Experience managing IPS/IDS tools
• Experience conducting ACAS scans
• Experience conducting incident response actions from alerts on a SIEM
• Experience using Tableau to render data into summary reports
• Experience providing security posture, threat, and risk reports and briefings to leadership
• Support in the establishment and maintenance of the CMDB to ensure accurate tracking of assets and configurations. Provides support to an organization, system, or enclave’s information assurance program.
• Experience leading defensive cyber operations teams or coordinating multi-platform CND activities
• Ability to correlate and analyze security data across endpoint, network, and cloud environments to drive incident response decisions
• Experience developing or improving SOPs, playbooks, and workflows for CND and cyber incident response

Preferred Qualifications:

• Clearance: Active TS/SCI with CI
• Poly Education: MS in Computer Science, Cybersecurity, or another related field Experience:
• 10+ years related professional work experience
• 7+ years working in the fields of CND, risk management, and continuous management of security tools
• Experience conducting cyber-attack analysis
• Experience conducting Battle Damage Assessments after a cyber-attack
• Experience detecting and mitigating insider threat
• Provides security certification test and evaluation of assets, vulnerability management and response, security assessment, and customer support.
• Documenting network schemas and cyber operation tool solutions
• Experience briefing cyber risk, defensive posture, and operational priorities to senior leadership
• Familiarity with enterprise-level cyber defense architecture and integration across SIEM, IDS/IPS, EDR, and vulnerability management platforms
• Demonstrated ability to mentor junior analysts and guide technical teams during cyber incidents