Computer Defense Network Analyst

Seneca Technologies is hiring a Computer Network Defense Analyst. The Computer Network Defense (CND) Analyst supports a Department of War (DOW) agency contractor environment cybersecurity operations by monitoring, analyzing, and responding to network and security events across enterprise environments. The analyst plays a critical role in protecting information systems through continuous monitoring, threat detection, vulnerability assessment, incident analysis, and reporting. This position contributes to the agency's cyber defense posture by identifying risks, performing control gap analyses, supporting security operations center (SOC) activities, and driving continuous improvement of cybersecurity processes and monitoring strategies.

Key Responsibilities

• Monitor security platforms, dashboards, and alerts to identify potential cyber threats, vulnerabilities, and suspicious activity.
• Analyze security events and indicators of compromise; investigate and escalate incidents in accordance with established procedures.
• Conduct control gap analyses to identify weaknesses in security controls and recommend mitigation strategies.
• Support Security Operations Center (SOC) activities, including continuous monitoring and cyber defense operations.
• Utilize vulnerability management and cloud security tools to assess and prioritize risks across enterprise systems.
• Develop and maintain cybersecurity dashboards, metrics, reports, and operational status updates for leadership and stakeholders.
• Review and correlate data from multiple security sources to identify trends, emerging threats, and areas requiring remediation.
• Collaborate with system owners, network engineers, enterprise architects, and cybersecurity teams to improve overall security posture.
• Assist with incident response activities, including triage, documentation, containment, and post-incident reporting.
• Contribute to the development and refinement of continuous monitoring strategies, standard operating procedures, and cybersecurity best practices.
• Support compliance, audit, and assessment activities related to Department of Defense cybersecurity requirements.

Required Qualifications

• Demonstrated experience in cybersecurity monitoring, threat detection, incident analysis, or Security Operations Center (SOC) environments.
• Ability to analyze and interpret security events, logs, alerts, and vulnerability findings.
• Experience performing control assessments and identifying security gaps within enterprise environments.
• Strong analytical, problem-solving, and communication skills.
• Ability to work independently as well as collaboratively within a mission-focused team.
• S. citizenship and ability to obtain and maintain all required government security clearances, as applicable.
• One or more of the following certifications:
  • CompTIA Security+ CE
  • CompTIA CySA+
  • GIAC Certified Incident Handler (GCIH)
  • Splunk Core Certified User or equivalent Splunk certification
  • Comparable cybersecurity operations certification

Education and Experience

Possess current Secret Clearance plus one of the following:

Associate's or Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related technical field with a minimum of four (4) years of experience in cybersecurity monitoring, cyber defense, incident response, or Security Operations Center (SOC) operations.

or Minimum of six (6) years of directly relevant cybersecurity, computer network defense, or SOC experience in lieu of a degree.

Technical Skills & Knowledge

Security Information and Event Management (SIEM)

• Splunk
• ArcSight
• Comparable SIEM and log management platforms

Vulnerability and Security Monitoring Tools

• Tenable Nessus
• AWS Inspector
• AWS GuardDuty
• Enterprise network monitoring and security monitoring tools

Cybersecurity Knowledge Areas

• Computer Network Defense (CND) operations
• Security event monitoring and analysis
• Threat detection and incident escalation
• Vulnerability management
• Network security principles and protocols
• Continuous monitoring programs
• Cybersecurity metrics and reporting
• Security control assessments and gap analysis
• Cloud security monitoring and AWS security services
• Incident response processes and cyber defense best practices

Location: Mechanicsburg, PA Remote work may be authorized. Employees working remotely must reside within commuting distance of an approved SIPRNet access location and be available to support classified work requirements as needed.

Clearance: Active Secret

Travel: Some CONUS travel required