Target Digital Network Analyst (TDNA)

• Conducts advanced analysis of SIGINT collection, pen source data, network data, and host data to ensure target continuity, to profile targets and their activities, and develop techniques to gain more target information.
• Provide expert analytic support at both network and host level to identify and characterize anomalies on USG networks.
• Possesses knowledge of target technologies and applies skills and knowledge of digital networks and the applications on them to determine how targets communicate, move, operate, and live.
• Applies analytic techniques to review relevant 'content carried in target communications.
• Applies geospatial analysis techniques against network packet information, computer OS system data, executable file data, host data, and metadata collected from tasked communications systems in order to identify anomalies, locate and track targets, and to accurately report the intelligence gained from the analysis to characterize anomalies on USG networks.
• The Target Digital Network Analyst (TDNA) is familiar with network-based adversary tactics, techniques, and procedures, network protocols, and common cyber vulnerabilities.
• This position will combine expert level research with analyzed intelligence community assessments and reports and open-source intelligence to support vulnerability discovery and mitigation efforts of United States National Defense platforms and Critical Infrastructure.
• This support includes writing intelligence reports, briefing and informing senior leadership, and traveling to cyber tabletop exercises (CTTXs)

Required:

• ACTIVE AND CURRENT TS.SCI with FSP through MD
• CI poly under 6 years.
• 5+ YOE in two (2) or more of the following areas:

1. Computer Network Exploitation, Computer Network Attack
2. Vulnerability Assessment
3. Penetration Testing
4. Incident Response
5. Network and/or host forensics
6. Cryptanalytic work in military or intelligence community organization

• Cryptology work in military or intelligence community organization
• Experience in analyzing DNI and DNR information for intelligence reporting.
• Proficiency in conducting sustained target analysis and utilizing advanced analytic techniques.
• Ability to build and maintain target profiles and relevant databases for targeting, tasking, and analysis.
• Strong skills in evaluating intelligence to identify gaps and tailor collection efforts.
• Familiarity with open-source data and collection analysis.
• Knowledge of relevant databases and tools for targeting and analysis.
• Minimum three (3) years’  experience in three (3) or more of the following areas:

1. Analysis of host data at rest, including:
2. Microsoft Windows operating systems, system internals, file attributes
3. Executable file analysis (particularly PE files including dynamic linked libraries)
4. File Hashing and Fuzzy File Hashing (e.g., ssdeep, fciv, and md5deep)
5. Forensic analysis of Windows systems, Linux systems, and/or mobile devices
6. Commercial, open source of GOTS tools for intrusion detection (e.g., Snort, BroIDS)
7. Packet capture/evaluation (e.g, tcpdump, ethereal/wireshark, NOSEHAIR)
8. Network mapping/discovery (e.g., nmap, TRICKLER)
9. Industry standard system/network tools (e.g., netcat, netstat, traceroute, rpcinfo, nbtscan, snmpwalk, Sysinternals suite)
10. Exploit development of Microsoft Windows operating systems
11. Exploit development of Linux operating systems
12. Exploit development of personal computer device/mobile device operating systems (e.g., Android, Blackberry, iPhone, and iPad)
13. Software Reverse Engineering to include use of code disassemblers (e.g., IDA Pro) and debugging unknown code (e.g., Ollydbg)
14. Analysis of code in memory, including analysis of RAM snapshots, Windows crash dump files, and/or Linux kernel dumps
15. SID(S2)/NTOC analysis and production working cyber adversary intrusion set/targets, foreign network intelligence analysis or the identification and extraction of digitally transported information.

Education:

• Bachelor’s degree in a STEM field preferred; may substitute four (4) years of relevant experience: