Cyber Intel Analyst Entry Level -(Scott AFB)

Job Description

COVID-19 continues to significantly impact our employees, families and communities. With employee health and safety as our top priority, and as a federal contractor, Lockheed Martin is taking action to address the increased risk and uncertainty COVID variants pose in the workplace and ensuring we meet our commitments to national security.
As directed by Executive Order 14042: Ensuring Adequate COVID Safety Protocols for Federal Contractors, effective December 8, 2021, Lockheed Martin will require all newly hired employees, in the United States, must be fully vaccinated before their start date.
Description:Lockheed Martin invites you to step up to one of today’s most daunting challenges: the use of advanced electronics to undermine our way of life. As a cybersecurity professional at Lockheed Martin, you’ll protect the networks that our citizens and the world depend upon each minute: Financial assets. Healthcare information. Critical infrastructure. Hazardous materials. The uninterrupted flow of energy that keeps modern life moving. Here, you’ll work with cybersecurity experts on the forefront of threat protection and proactive prevention. In this fast-paced, real-world environment, you’ll draw on all of your education and experience as well as the resources of Lockheed Martin to keep the threats at bay.
The candidate will be a member of Network Assurance supporting a US Government customer as part of our Scott AFB, IL team. The candidate will perform cyber threat intelligence analysis, correlate actionable security events, perform network traffic analysis using raw packet data, net flow, IDS, IPS and custom sensor output as it pertains to the cyber security of communications networks, and participate in the coordination of resources during incident response efforts.
Enter into the cyber terrain that most people know only from headlines and sci-fi. Become part of the Cybersecurity Team at Lockheed Martin. You are meant to make a difference.
Basic Qualifications:
-Hold DoD-8570 baseline certification (Security+, CEH, CYSA+, CISSP, or equivalent).
-Possess an active Secret security clearance.
-Practical experience with cyber specific analysis tools
-General understanding of intrusion detection and incident response
-Working knowledge of TCP/IP, common networking ports and protocols, network traffic flow, countermeasure techniques, OSI model, defense-in-depth, Cyber Kill Chain or similar attack model.
-Willing to perform shift work.
Desired Skills:
-Computer Network Defense experience (Protect, Detect, Respond, and Sustain) within a Computer Incident Response organization.
-Demonstrated understanding of the life cycle of network threats, attacks, attack vectors, and methods of exploitation with an understanding of intrusion set Tactics, Techniques, and Procedures.
-Demonstrated hands-on experience analyzing high volumes of logs, network data (e.g. Netflow, Full Packet Capture), and other artifacts in support of incident investigations.
-In-depth knowledge of architecture, engineering, and operations of at least one enterprise SIEM platform (e.g. Nitro/McAfee Enterprise Security Manager, ArcSight, QRadar, LogLogic, Splunk).
-Experience and proficiency with any of the following: Anti-Virus, HIPS, IDS/IPS, Wireshark, Full Packet Capture, Host-Based Forensics, Network Forensics, intel threat analysis.
-Familiar with encryption methods and encoding of data
-Experience with malware analysis concepts and methods.
-UNIX/LINUX command line experience.
-Scripting and programming experience.
-Motivated self-starter with strong written and verbal communications skills, and the ability to create complex technical reports on analytic findings.