Jobs in the United States

25+ jobs

Save this search

Added 1 min ago
GFEBS Functional Analyst
Thompson Gray Inc.
Washington, DC
Serve as functional support for the General Fund Enterprise Business System (GFEBS). Execute intermediate document reports in GFEBS in a variety of process areas.
Added 2 mins ago
10629 - Business Process Analyst I
Hyundai Autoever America
Irvine, CA
The Business Process Analyst I analyzes, defines, and improves business processes and supporting applications to help align operational needs with organizational strategy. This role…
Added 6 mins ago
Software Asset Management / IT Requirements Strategist
CACI, INC.-FEDERAL
Fort Belvoir, VA · Washington, DC
…Integration (NC4SI) Directorate. In this role, you will directly support the optimization of Army-wide Enterprise License Agreements (ELAs) and IT software investments. You will serve as an…
Added 6 mins ago
Agile Delivery Manager
CACI, INC.-FEDERAL
Washington, DC
CACI is seeking an experienced Agile Delivery Manager to support the Department of Homeland Security (DHS) Office of the Inspector General (OIG). This role offers a unique opportunity to…
Added 8 mins ago
Programmer Analyst III
UTSW
TX
The Programmer Analyst III is a hands-on developer supporting UT Southwestern's Revenue Cycle Automation Program. This fully remote position develops, maintains, and improves automations,…
Added 10 mins ago
Intel Analyst
Two Six Technologies
Remote, United States
Two Six Technologies is seeking an Intel Analyst to join our team! You will drive analytical efforts in support of client objectives leveraging next-generation operations and analysis…
Added 10 mins ago
Information Systems Security Officer
Two Six Technologies
Arlington, VA
Perform annual self-inspections and self-assessments of TST’s security program.
Added 11 mins ago
Sr. Advanced Analytics Analyst
USA-MiniMed Distribution Corp. 1018
Virtual, MN · Northridge, CA
The Senior Advanced Analytics Analyst is an integral member of the Finance organization, responsible for designing and delivering sophisticated financial analytics, forecasting models, and…
Added 13 mins ago
Senior Procurement Financial Analyst
Boeing
Hazelwood, MO
…conducting cost and price analysis of supplier proposals. You will support Boeing’s work across U.S. Government, Foreign Military Sales (FMS), and Direct Commercial Sale (DCS) contracts,…
Added 14 mins ago
Analyst, Security Operations Center
Lewis Energy Group
San Antonio, TX
As a Security Operations Center Analyst, you will monitor security systems and employee locations in real time, triages alarms and incidents, supports international travel security, and…
Added 14 mins ago
FMS Program Analyst (Senior) - PMS 326
Morgan Business Consulting, LLC
Arlington, VA
The FMS Program Analyst will support the Office of NAVSEA’s PMS 326 with the day-to-day management of Security Assistance Programs and assigned Foreign Military Sales (FMS) cases.
Added 20 mins ago
General Analyst, HQ USSOCOM J5 Plans and Integration Program
RDR Inc
Tampa, FL
RESPONSIBILITIES: Support analyses and assessments during the development of strategic planning, command strategy, posture, readiness, risk assessments, and operational return on…
Added 22 mins ago
Technical Support Analyst
Internova Travel Group
Beverly Hills, CA
Internova is currently looking for a Technical Support Analyst to provide technical expertise and trouble-shooting, finding solutions and supporting hardware, software, and operating…
Added 23 mins ago
SENIOR HUMAN SERVICES PROGRAM MGR - SES - 64038556
State of Florida
TAMPA, FL
…Department of Health can help with our tuition reimbursement program. We offer an inspiring and encouraging atmosphere to support you while you work with…
Added 27 mins ago
Service Center Support Desk Analyst
BAE Systems
Columbia, SC
Expertise and technical proficiencies in providing steady-state support for deployed desktop and laptop images using enterprise-wide deployment techniques. Ability to execute routine…
Added 28 mins ago
K
Supply Chain Risk Analyst
Kforce
McLean, VA
- $35 to $40 USD / hour
We are seeking a Junior Supply Chain Risk Analyst to support cybersecurity and supply chain risk management activities within a Federal Government environment. This role will assist with…
Added 28 mins ago
Chamber Test Analyst
Torch Technologies, Inc.
United States
Torch Technologies is seeking a highly skilled Chamber Test Analyst to support the 718th Test Squadron (718 TS) at the Arnold Engineering Development Complex (AEDC). The 718 TS operates…
Added 30 mins ago
GBS Business Analyst
Konica Minolta Business Solutions, U.S.A., Inc.
Nashville, TN
Added 31 mins ago
Trust Reporting Analyst 1
U.S. Bank National Association
Chicago, IL
U.S. Bank participates in the U.S. Department of Homeland Security E-Verify program in all facilities located in the United States and certain U.S. territories. The E-Verify program is an…
Added 31 mins ago
Maritime Security - Senior Program Analyst
Noblis
Washington, DC
The Maritime Security Solutions Senior Project Analyst will provide expert-level scientific, technical, and project management support to the Maritime Security Solutions portfolio within…
Added 33 mins ago
Analyst - Network Planning Operations Integration
United Airlines
Chicago, IL
…promote the operational and commercial success of United. The Analyst – Operations Integration role will be responsible for supporting operational criteria portfolio management, the…
Added 33 mins ago
Associate Analyst - Network Planning Operations Integration
United Airlines
Chicago, IL
…operational and commercial success of United. The Associate Analyst – Operations Integration role will be responsible for supporting operational criteria portfolio management, the…
Added 34 mins ago
Principal Product Manager
Veeam Software
San Jose, CA
…scale. As the market leader in both data resilience and data security posture management, Veeam is built for the convergence of identity, data, security, and AI risk. Headquartered in…
Added 34 mins ago
JA
Manager Product Partnerships and Media
JetBlue Airways Corporation
Long Island City, NY
- $114,000 to $170,000 USD / year
The Manager, Product Partnerships and Media will support the Product Development team with sourcing, structuring, negotiating, and implement revenue-generating & cost-offsetting…
Added 36 mins ago
IT Business Analyst
Schlage Lock Company LLC
Olathe, KS
Creating Peace of Mind by Pioneering Safety and Security

BCMC

Network Forensics Analyst

Arlington, VA, United States

Apply About employer

Applications open in a new tab.

Job details

Apply by: Feb 1, 2027
Posting language: English
Posted: Nov 3, 2026

Original job description

The DHS Hunt and Incident Response Team (HIRT) secures the nation’s infrastructure. HIRT provides DHS’s front-line response for cyber incidents and proactive hunting for malicious cyber activity. Nightwing provides support for on- and offsite incident response to government agencies and critical infrastructure owners who experience cyber-attacks. Nightwing delivers HIRT advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation using host- and network-based cybersecurity analysis capabilities. Personnel perform investigations to characterize the severity of breaches and develop mitigation/remediation plans.

Nightwing is seeking a Network Forensics Analyst with deep expertise in one or more edge device technologies (Cisco, Ivanti, Palo Alto, Ciena, Juniper) to support this critical customer mission.

Responsibilities:

Serves as a hunt and incident response subject matter expert (SME), applying in-depth knowledge of threat actor tools, techniques, and procedures (TTPs), with a focus on network centric and edge device compromises.
Serves as an incident response expert in support of a technology insertion team, evaluating and integrating new network forensic and monitoring capabilities.
Assists the Government lead in coordinating teams for preliminary incident response investigations, including onsite and remote engagements.
Assists the Government lead by interfacing with the customer while onsite, clearly communicating status, findings, and recommendations.
Characterizes and analyzes network traffic (including PCAP, flow, and device logs) to identify anomalous activity and potential threats to network resources.
Identifies and analyzes anomalies in network traffic using metadata (e.g., flow records, DNS logs, proxy logs) to detect and scope malicious activity.
Reconstructs malicious attacks or activities based on network traffic, including timelines, attacker paths, and data exfiltration patterns.
Examines network topologies to understand data flows, trust boundaries, and potential choke points; uses this understanding to inform hunt and response activities.
Assesses network topology and device configurations, identifying critical security concerns and providing security best practice recommendations, especially for Cisco, Ivanti, Palo Alto, Ciena, and Juniper platforms.
Determines appropriate courses of action in response to identified and analyzed anomalous network activity, including containment, eradication, and hardening actions.
Applies knowledge of defense-in-depth principles and general attack stages to evaluate and improve network security architecture and edge-device configurations.
Applies knowledge of network device integrity concepts and methodologies to validate device state, detect unauthorized modification, and recommend remediation.
Leads analysis of device logs, configurations, and telemetry from routers, switches, firewalls, VPNs, and remote access appliances to identify, scope, and reconstruct intrusions.
Provides expert support, analysis, and research with only broad direction into exceptionally complex problems and processes relating to hunt and incident response activities.
Serves as a technical expert on high-level incident response teams, providing technical direction, interpretation, and alternatives for network-centric incidents.
Exercises considerable latitude in determining technical objectives and independently develops technical solutions to complex problems requiring ingenuity and creativity.
Analyzes incident data and victim environments to recommend targeted mitigations, including network segmentation, policy updates, and device hardening.
Advises technical personnel on countermeasure implementation and customization (e.g., firewall rules, IPS signatures, access control lists).
Supports internal stakeholders on containment and eradication missions, on-site and remotely.
Ensures evidence integrity is preserved according to standard operating procedures or national standards when collecting network data, device artifacts, and logs.
Assists with the writing and publishing of Computer Network Defense (CND) guidance and detailed reports on incident findings to appropriate constituencies.
Distills analytic findings into executive summaries and in-depth technical reports suitable for both leadership and highly technical audiences.
Documents analysis, TTPs, and device specific incident handling procedures in a standardized knowledge base for sharing and publication.
Assists in maintaining branch process and procedure documentation and guides the completion of hunt and incident response activities.

Required Skills:

U.S. Citizenship.
Active TS/SCI clearance.
Ability to obtain DHS Suitability.
8+ years of directly relevant experience
3+ years of experience related to the evaluation and implementation of new cyber response or network forensic capabilities.
Hands-on experience with incident response or network operations involving enterprise edge devices from at least two of the following vendors: Cisco, Ivanti, Palo Alto, Ciena, Juniper.
Strong understanding of network architecture and security, including routing, switching, VPNs, firewalls, segmentation, and defense in depth.
Knowledge of Computer Network Defense (CND) policies, procedures, and regulations relevant to U.S. government or similar environments.
Ability to: o Characterize and analyze network traffic to identify anomalous activity and potential threats. o Identify and analyze anomalies in network traffic using metadata (flow, DNS, proxy, etc.). o Reconstruct malicious activity based on network traffic and device logs.
Understanding of general attack stages (reconnaissance, initial access, lateral movement, exfiltration, etc.) and how they manifest across the network.
Understanding of system and application security threats and vulnerabilities and how they are observed in network traffic.
Understanding of proactive analysis of systems and networks, including establishing trust levels of critical resources and detecting anomalous behavior.
Proficiency with common operating systems (e.g., Linux/Unix, Windows).
Experience performing cyber incident response (scoping, containment, eradication, recovery) in operational environments.
Ability to think independently, make sound decisions under pressure, and work with limited guidance.
Superior written and oral communication skills, including the ability to clearly explain technical issues to both technical and non-technical stakeholders.
Ability to work collaboratively across physical locations and within distributed teams.
Skilled in identifying different classes of attacks and attack stages and translating findings into actionable recommendations.
Rapid Network & Tapping Setup: Ability to quickly configure network TAPs, packet brokers, SPAN ports, and unmanaged/managed switches without disrupting live production or air-gapped traffic.

Desired Skills:

Experience leading and mentoring technical teams in incident response, network operations, or security engineering.
Network and system administration experience in large or complex enterprise or service-provider environments.
Strong understanding of adversarial TTPs (including MITRE ATT&CK) and different operational threat environments (e.g., script kiddies, non nation state adversaries, nation state actors).
Knowledge of defense-in-depth and zero trust principles and their application to network and edge-device architectures.
Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, injections, race conditions, covert channels, replay, ROP, malicious code).
Knowledge of network device integrity verification and monitoring approaches.
Hands-on skill in host/network intrusion detection and event correlation across multiple telemetry sources (firewalls, IDS/IPS, endpoint, SIEM).
Experience with malicious activity analysis, including network beaconing, C2, and data exfiltration detection.
Experience with Identity and Access Management (IAM) tools and their integration into network/edge security architectures.
Ability to review and analyze Enterprise Architecture (EA) from a security perspective and recommend architecture-level improvements.
Ability to collaborate with stakeholders at multiple levels within an organization (technical staff, management, senior leadership).
Field Diagnostics & Cyber Forensics: Skills in running preloaded analysis stacks, protocol parsers (e.g., Modbus, DNP3, OPC UA), vulnerability scanning, and local packet capture at line rate.
Compact Pack & Weight Management: Packing, securing, and transporting ruggedized cases (such as Pelican or Nanuk) that fit standard weight and carry-on/air-transport limits.

Required Education:

BS in Computer Science, Cyber Security, Computer Engineering, or related degree; OR HS Diploma and 10+ years of technical experience in the area of expertise.

Desired Certifications (One or more):

IASAE II, CSSP Analyst, GCIA, GCIH, CSSP Incident Responder,CEH,
SANS GIAC GCIA or GNFA (preferred for network forensics).
SANS GRID, GICSP, or GCIP (plus).
Vendor / network certifications (highly desired): o Cisco CCNA (or higher: CCNP Security, CCNP Enterprise). o Vendor certifications for Palo Alto, Juniper, Ciena, or Ivanti (e.g., PCNSE, JNCIS/JNCIP, etc.).

Our Company Overview Business Computers Management Consulting Group, LLC (BCMC) is a small business specializing in Information Technology (IT), Cybersecurity, Information Assurance (IA), SOA, Big Data Management, Program Management, and more for Federal, State, and Local agencies. We possess highly skilled engineers, providing innovative solutions backed by strong past performances. We are ISO 9001:2015, ISO 27001:2013, 20000:2018, and CMMI L3 certified and registered promising highest quality and services to all of our clients.

Benefits

Extremely competitive salary 95% employer paid for employee medical, dental, & vision coverages 100% employer paid for employee life, STD & LTD disability coverages 401k with company match Flexible Spending Account (FSA) for dependent & health care 11 standard holidays & 3 weeks of annual leave

NBA04 Network Based Systems Analyst - IV ESS-3691 ESS-3692

Apply About employer

More about this job

Skills

Incident response
DNS
Research
IPS
Leadership
Documentation
Security threats
Linux
UNIX
Microsoft Windows
Communication skills
Coaching
System administration
MITRE ATT&CK
IDS
Identity and access management
Negotiate with stakeholders
Computer science
Cybersecurity
Computer engineering
CCNA
CCNP

Report this job