Computer Defense Network Analyst

Computer Network Defense AnalystSeneca Technologies is hiring a Computer Network Defense (CND) Analyst. The CND Analyst supports a Department of War (DOW) agency contractor environment cybersecurity operations by monitoring, analyzing, and responding to network and security events across enterprise environments. The analyst plays a critical role in protecting information systems through continuous monitoring, threat detection, vulnerability assessment, incident analysis, and reporting. This position contributes to the agency's cyber defense posture by identifying risks, performing control gap analyses, supporting security operations center (SOC) activities, and driving continuous improvement of cybersecurity processes and monitoring strategies.Key ResponsibilitiesMonitor security platforms, dashboards, and alerts to identify potential cyber threats, vulnerabilities, and suspicious activity.Analyze security events and indicators of compromise; investigate and escalate incidents in accordance with established procedures.Conduct control gap analyses to identify weaknesses in security controls and recommend mitigation strategies.Support Security Operations Center (SOC) activities, including continuous monitoring and cyber defense operations.Utilize vulnerability management and cloud security tools to assess and prioritize risks across enterprise systems.Develop and maintain cybersecurity dashboards, metrics, reports, and operational status updates for leadership and stakeholders.Review and correlate data from multiple security sources to identify trends, emerging threats, and areas requiring remediation.Collaborate with system owners, network engineers, enterprise architects, and cybersecurity teams to improve overall security posture.Assist with incident response activities, including triage, documentation, containment, and post-incident reporting.Contribute to the development and refinement of continuous monitoring strategies, standard operating procedures, and cybersecurity best practices.Support compliance, audit, and assessment activities related to Department of Defense cybersecurity requirements.Required QualificationsDemonstrated experience in cybersecurity monitoring, threat detection, incident analysis, or Security Operations Center (SOC) environments.Ability to analyze and interpret security events, logs, alerts, and vulnerability findings.Experience performing control assessments and identifying security gaps within enterprise environments.Strong analytical, problem-solving, and communication skills.Ability to work independently as well as collaboratively within a mission-focused team.U.S. citizenship and ability to obtain and maintain all required government security clearances, as applicable.One or more of the following certifications:CompTIA Security+ CECompTIA CySA+GIAC Certified Incident Handler (GCIH)Splunk Core Certified User or equivalent Splunk certificationComparable cybersecurity operations certificationEducation and ExperiencePossess current Secret Clearance plus one of the following:Associate's or Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related technical field with a minimum of four (4) years of experience in cybersecurity monitoring, cyber defense, incident response, or Security Operations Center (SOC) operations.or Minimum of six (6) years of directly relevant cybersecurity, computer network defense, or SOC experience in lieu of a degree.Technical Skills & KnowledgeSecurity Information and Event Management (SIEM)SplunkArcSightComparable SIEM and log management platformsVulnerability and Security Monitoring ToolsTenable NessusAWS InspectorAWS GuardDutyEnterprise network monitoring and security monitoring toolsCybersecurity Knowledge AreasComputer Network Defense (CND) operationsSecurity event monitoring and analysisThreat detection and incident escalationVulnerability managementNetwork security principles and protocolsContinuous monitoring programsCybersecurity metrics and reportingSecurity control assessments and gap analysisCloud security monitoring and AWS security servicesIncident response processes and cyber defense best practicesLocation: Mechanicsburg, PA Remote work may be authorized. Employees working remotely must reside within commuting distance of an approved SIPRNet access location and be available to support classified work requirements as needed.Clearance: Active SecretTravel: Some CONUS travel requiredEqual Opportunity Statement:Seneca Holdings provides equal employment opportunities to all employees and applicants without regard to race, color, religion, sex/gender, sexual orientation, national origin, age, disability, marital status, genetic information and/or predisposing genetic characteristics, victim of domestic violence status, veteran status, or other protected class status. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leave of absence, compensation and training. The Company also prohibits retaliation against any employee who exercises his or her rights under applicable anti-discrimination laws. Notwithstanding the foregoing, the Company does give hiring preference to Seneca or Native individuals. Veterans with expertise in these areas are highly encouraged to apply. Seneca Holdings LLC