Target Digital Network Analyst

Overview

Talon Defense seeks a Target Digital Network Analyst to analyze digital network activity, host data, and adversary infrastructure in support of national security cyber missions.

Key Responsibilities

• Analyze host data at rest, including Windows operating systems, system internals, and file attributes
• Analyze executable files, including PE files and dynamic link libraries
• Perform forensic analysis of Windows systems, Linux systems, and/or mobile devices
• Apply intrusion detection, packet capture, network mapping, and standard system and network tools
• Reverse engineer software and analyze code in memory, including RAM snapshots and crash or kernel dumps
• Conduct analysis and production on cyber adversary intrusion sets and targets, foreign network intelligence, or digitally transported information

Required Qualifications

• 5+ years of experience in at least two of the following: computer network exploitation or computer network attack, vulnerability assessment, penetration testing, incident response, network and/or host forensics, cryptanalytic work in a military or intelligence community organization, or cryptology work in a military or intelligence community organization
• A Bachelor's degree in Electrical, Computer, or Software Engineering, Computer Science, Mathematics, or Information Systems may substitute for up to four (4) years of the experience above
• 3+ years of experience in at least three of the following: analysis of host data at rest, including Windows operating systems, system internals, and file attributes; executable file analysis, particularly PE files including dynamic link libraries; file hashing and fuzzy file hashing (e.g., ssdeep, fciv, md5deep); forensic analysis of Windows systems, Linux systems, and/or mobile devices; commercial, open source, or GOTS intrusion detection tools (e.g., Snort, Zeek/Bro); packet capture and evaluation (e.g., tcpdump, Wireshark); network mapping and discovery (e.g., nmap); industry standard system and network tools (e.g., netcat, netstat, traceroute, rpcinfo, nbtscan, snmpwalk, Sysinternals suite); exploit development for Windows, Linux, or personal computer and mobile device operating systems; software reverse engineering, including use of code disassemblers (e.g., IDA Pro) and debugging unknown code (e.g., OllyDbg); analysis of code in memory, including RAM snapshots, Windows crash dump files, and/or Linux kernel dumps; or analysis and production on cyber adversary intrusion sets and targets, foreign network intelligence analysis, or the identification and extraction of digitally transported information