5197 - NetSA Operational Support Analyst

POSITION SUMMARY:
The CERT® Program is part of the SEI, a federally funded research and development center at Carnegie Mellon University in Pittsburgh, Pennsylvania.  The CERT® Program engages in cutting-edge research and development and develops and transitions disciplined approaches to improve the survivability and resiliency of the DoD, federal civilian agencies, private sector organizations and their networked information systems.

The CERT Network Situational Awareness (NetSA) group supports internal and external customers by developing cutting-edge analysis techniques and tools for regular operational use in high-impact environments.  The operational support analyst will advise analysts at customer operations centers on analysis issues, prepare customer-focused analysis studies, and work with customers to develop requirements NetSA analysis and engineering efforts.


Education/Training:
Bachelor of Science in Computer Science or scientific/technical field with 8 years experience, or equivalent; Masters Degree in Computer Science or scientific/technical field with 5 years experience, or equivalent.

Licenses:
N/A.

Experience:
Professional experience should include 5 or more years of network security analysis experience in a large-scale network defense operations center, or as a system administrator support a large network, and 2 or more years experience in an advisory or a technical leadership role. This experience should include contributing to analysis reporting, as well as at least 5 years of programming experience (see skills below).

Skills/Abilities:
•Broad understanding of network, database and application security issues
•Expertise in one major network security areas:  incident handling, network traffic analysis, forensics, vulnerability assessment, network auditing, etc.
•Theoretical knowledge of and practical experience with various Internet protocols (e.g., TCP/IP, DNS, SMTP, BGP, TLS)
•Deep knowledge of multiple modern operating systems (e.g., Linux, Solaris, Windows 2000+, BSD, OSX)
•Ability to develop scripts and applications using shell scripting or high-level programming languages such as Perl or Python, employing sound software engineering practices
•Ability to function in the role of a consultant
•Ability to define and implement an analytical study or investigation and report on findings
•User or implementation level experience with a subset of the following technologies: IDS (e.g., Snort, RealSecure), IPS, SIM/SEM (e.g, ArcSight, eSecurity), network mapping, vulnerability scanners (e.g., Nessus), firewalls, and routers (Cisco)
•Planning and organizational skills; strong problem solving skills; excellent oral and written communication skills.
•Ability to work both independently and with teams

Mobility:
Primarily sedentary in an office setting with some mobility. Flexibility to travel to various locations within the SEI and CMU community, sponsor sites, conferences, and offsite meetings potentially with routine frequency.

Environmental Conditions:
Normal office conditions; close contact with computer display for extended periods of time.

Mental:
The ability to:
•work meticulously with careful attention to detail;
•meet deadlines while working on multiple tasks – sometimes under pressure and with shifting priorities;
•deal collaboratively, diplomatically, and successfully with customers, co-workers and other professional colleagues, managers, and staff; ability to grasp the big picture, direction, and goals of an effort;
•develop and communicate innovative ideas;
•take leadership role in technical projects; and
•quickly learn new procedures, techniques, and approaches.

Other:
Candidates must be able to pass a background investigation, obtain a DoD TS/SCI security clearance, and be a US citizen.

ESSENTIAL FUNCTIONS:
(1) provide direct support to customer operational centers in the form of on-site consulting, training, development of analytical products and elicitation of requirements.

(2) perform analytical studies on customer data-sets; document findings in reports, presentations, and technical exchanges.

(3) design, prototype, and transition analytical techniques and tools appropriate for operational use in situational awareness.

(4) contribute to the broader security community; conduct peer-review; participate in meetings and presentations; give talks as appropriate

TO APPLY:
Careers@CarnegieMellon makes it easy for you to search for positions at
the SEI that match your interests, apply for positions electronically,
and create a Job Agent that will notify you by email when jobs that meet
your criteria become available.

Please visit the Careers@CarnegieMellon web site
( https://secured.kenexa.com/cmu/cc/Home.ss) to create a profile and
apply to this position (job number 5197).