NOSC Analyst

Job Description
BAE Systems, a top-ten prime contractor to the U.S. Department of Defense, enables the U.S. government to transform data into intelligence and provides engineering, integration and sustainment support for critical military platforms and systems. Intelligence & Security provides services and products to the Department of Defense, the intelligence community, federal law enforcement officials, and troops deployed around the world.
At BAE Systems, we promote a strong, collaborative culture and provide our employees with the tools, skills and training they need to succeed. We are all about trust, camaraderie and a shared ambition to lead the world in defense technologies and national security services. Be a part of a company that is part of the community; driven to improve our future and protect our freedom.
BAE Systems is looking for a Cybersecurity Analyst to serve as TIER II analyst in a 24x7x365 Network Operations and Security Center (NOSC) for a program that delivers cloud and on-prem services across multiple classification levels and remote locations.
Responsibilities will include:

• Support in establishing and managing a 24x7x365 Network Operations and Security Center (NOSC) to provide a secure environment that facilitates incident response and threat hunting activities.
• Work closely with and provide coverage for co-located NOC analysts, ptroviding relevant artifacts and analysis IOT assist troubleshooting network transport related incidents.
• Utilize the security information and event management (SIEM) platform to monitor for security alerts and coordinate vulnerability assessments and artifact collection across servers and network devices
• Evaluate network structures and device configurations for security risks, offering recommendations based on best practices, and gather data to identify and respond to network intrusions
• Analyze network traffic (both CLOUD and on-prem) and system logs to identify malicious activities, vulnerabilities exploited, and methods used, and develop processes to enhance SOC response and efficiency
• Conduct technical analyses of computer evidence, and synthesize findings into reports for both technical and non-technical audiences in accordance with established policies/procedures and applicable regulations.
• Capable of attack reconstruction based on network traffic, integrating Threat Intelligence, and familiar with MITRE ATT&CK framework, with the ability to collaborate effectively across multiple locations
  XYZ

Required Education, Experience, & Skills

• Bachelor's degree in computer science, information systems, or other technology-related field
• 3+ years of experience in security operations, demonstrating leadership in customer-facing roles
• DoDM 8140.03 qualifying certifications
• Proficient in analyzing cyber-attacks, with a deep understanding of attack classifications, stages, system/application vulnerabilities, and compliance with Department of Defense (DoD) policies and procedures
• Familiarity with network topologies, protocols (e.g., TCP/IP, ICMP, HTTP/S, DNS, SSH, SMTP, SMB), and experience with tools/systems including AWS, Cisco, Splunk SIEM, Splunk Forwarders, IDS/IPS, VMware, SSL Decryption, proxy and DLP operations, Windows and Linux based endpoints.
• Understanding of Threat Intelligence integration and associated integration throughout the enterprise at multiple layers.

Preferred Education, Experience, & Skills

• Certified Ethical Hacker (CEH), GIAC Certified Incident Handler (GCIH)

Pay Information
Full-Time Salary Range: $77809 - $132275
Please note: This range is based on our market pay structures. However, individual salaries are determined by a variety of factors including, but not limited to: business considerations, local market conditions, and internal equity, as well as candidate qualifications, such as skills, education, and experience.
Employee Benefits: At BAE Systems, we support our employees in all aspects of their life, including their health and financial well-being. Regular employees scheduled to work 20+ hours per week are offered: health, dental, and vision insurance; health savings accounts; a 401(k) savings plan; disability coverage; and life and accident insurance. We also have an employee assistance program, a legal plan, and other perks including discounts on things like home, auto, and pet insurance. Our leave programs include paid time off, paid holidays, as well as other types of leave, including paid parental, military, bereavement, and any applicable federal and state sick leave. Employees may participate in the company recognition program to receive monetary or non-monetary recognition awards. Other incentives may be available based on position level and/or job specifics.
About BAE Systems Intelligence & Security
BAE Systems, Inc. is the U.S. subsidiary of BAE Systems plc, an international defense, aerospace and security company which delivers a full range of products and services for air, land and naval forces, as well as advanced electronics, security, information technology solutions and customer support services. Improving the future and protecting lives is an ambitious mission, but it's what we do at BAE Systems. Working here means using your passion and ingenuity where it counts - defending national security with breakthrough technology, superior products, and intelligence solutions. As you develop the latest technology and defend national security, you will continually hone your skills on a team-making a big impact on a global scale. At BAE Systems, you'll find a rewarding career that truly makes a difference.
Intelligence & Security (I&S), based in McLean, Virginia, designs and delivers advanced defense, intelligence, and security solutions that support the important missions of our customers. Our pride and dedication shows in everything we do-from intelligence analysis, cyber operations and IT expertise to systems development, systems integration, and operations and maintenance services. Knowing that our work enables the U.S. military and government to recognize, manage and defeat threats inspires us to push ourselves and our technologies to new levels.
This position will be posted for at least 5 calendar days. The posting will remain active until the position is filled, or a qualified pool of candidates is identified.