Target Digital Network Analyst (TDNA)

Target Digital Network Analyst (TDNA)This is a projected vacancy expected to become available in October 2026.We are seeking a Target Digital Network Analyst familiar with network-based adversary tactics, techniques, and procedures, network protocols, and common cyber vulnerabilities. This position will combine expert level research with analyzed intelligence community assessments and reports and open-source intelligence to support vulnerability discovery and mitigation efforts of United States National Defense platforms and Critical Infrastructure. This support includes writing intelligence reports, briefing and informing senior leadership, and traveling to cyber tabletop exercises (CTTXs)Responsibilities:Conducts advanced analysis of SIGINT collection, pen source data, network data, and host data to ensure target continuity, to profile targets and their activities, and develop techniques to gain more target information.Provide expert analytic support at both network and host level to identify and characterize anomalies on USG networks.Possesses knowledge of target technologies and applies skills and knowledge of digital networks and the applications on them to determine how targets communicate, move, operate, and live.Applies analytic techniques to review relevant 'content carried in target communications.Applies geospatial analysis techniques against network packet information, computer OS system data, executable file data, host data, and metadata collected from tasked communications systems in order to identify anomalies, locate and track targets, and to accurately report the intelligence gained from the analysis to characterize anomalies on USG networks.What You'll Be Doing:Your effort and expertise are crucial to the success and execution of this impactful mission. This opportunity supports a team of Target Analyst Reporters and Target Digital Network Analysts, responsible for improving, protecting, and defending our Nation's Security.The Target Digital Network Analyst conducts advanced analysis of collection and open-source data to ensure target continuity, to profile targets and their activities, and develop techniques to gain more target information. The Target Digital Network Analyst has an understanding the principles and methods of exploiting foreign communications and communication systems to identify, collect, analyze process and disseminate information in accordance with established requirements and priorities; analyzes DNI data for reportable intelligence information and building target profiles; maintains appropriate databases for targeting, tasking, and analysis; performs sustained target analysis and enhancement through the use of DNI and DNR analytic techniques; analyzes DNI data to identify new access development opportunities for follow-on collection requirements; performs research using open source and classified sources to develop comprehensive baseline profiles of designated target sets; identifies intelligence gaps and evaluating the intelligence gathered in order to either tailor current collection or enable new collection to close the gaps.Required Skills:Experience in analyzing DNI and DNR information for intelligence reporting.Proficiency in conducting sustained target analysis and utilizing advanced analytic techniques.Ability to build and maintain target profiles and relevant databases for targeting, tasking, and analysis.Strong skills in evaluating intelligence to identify gaps and tailor collection efforts.Familiarity with open-source data and collection analysis.Knowledge of relevant databases and tools for targeting and analysis.Minimum of five (5) years' experience in two (2) or more of the following areas; Bachelor's degree in a STEM field preferred; may substitute four (4) years of relevant experience:Computer Network Exploitation, Computer Network AttackVulnerability AssessmentPenetration TestingIncident ResponseNetwork and/or host forensicsCryptanalytic work in military or intelligence community organizationCryptology work in military or intelligence community organizationMinimum three (3) years' experience in three (3) or more of the following areas:Analysis of host data at rest, including:Microsoft Windows operating systems, system internals, file attributesExecutable file analysis (particularly PE files including dynamic linked libraries)File Hashing and Fuzzy File Hashing (e.g., ssdeep, fciv, and md5deep)Forensic analysis of Windows systems, Linux systems, and/or mobile devicesCommercial, open source of GOTS tools for intrusion detection (e.g., Snort, BroIDS)Packet capture/evaluation (e.g, tcpdump, ethereal/wireshark, NOSEHAIR)Network mapping/discovery (e.g., nmap, TRICKLER)Industry standard system/network tools (e.g., netcat, netstat, traceroute, rpcinfo, nbtscan, snmpwalk, Sysinternals suite)Exploit development of Microsoft Windows operating systemsExploit development of Linux operating systemsExploit development of personal computer device/mobile device operating systems (e.g., Android, Blackberry, iPhone, and iPad)Software Reverse Engineering to include use of code disassemblers (e.g., IDA Pro) and debugging unknown code (e.g., Ollydbg)Analysis of code in memory, including analysis of RAM snapshots, Windows crash dump files, and/or Linux kernel dumpsSID(S2)/NTOC analysis and production working cyber adversary intrusion set/targets, foreign network intelligence analysis or the identification and extraction of digitally transported information.TS/SCI with polygraph is required.