[Hiring] Computer Network Defense Analyst @Seneca Holdings

Role Description

Seneca Technologies is hiring a Computer Network Defense Analyst. The Computer Network Defense (CND) Analyst supports a Department of War (DOW) agency contractor environment cybersecurity operations by monitoring, analyzing, and responding to network and security events across enterprise environments. The analyst plays a critical role in protecting information systems through continuous monitoring, threat detection, vulnerability assessment, incident analysis, and reporting. This position contributes to the agency's cyber defense posture by identifying risks, performing control gap analyses, supporting security operations center (SOC) activities, and driving continuous improvement of cybersecurity processes and monitoring strategies.

Key Responsibilities

• Monitor security platforms, dashboards, and alerts to identify potential cyber threats, vulnerabilities, and suspicious activity.
• Analyze security events and indicators of compromise; investigate and escalate incidents in accordance with established procedures.
• Conduct control gap analyses to identify weaknesses in security controls and recommend mitigation strategies.
• Support Security Operations Center (SOC) activities, including continuous monitoring and cyber defense operations.
• Utilize vulnerability management and cloud security tools to assess and prioritize risks across enterprise systems.
• Develop and maintain cybersecurity dashboards, metrics, reports, and operational status updates for leadership and stakeholders.
• Review and correlate data from multiple security sources to identify trends, emerging threats, and areas requiring remediation.
• Collaborate with system owners, network engineers, enterprise architects, and cybersecurity teams to improve overall security posture.
• Assist with incident response activities, including triage, documentation, containment, and post-incident reporting.
• Contribute to the development and refinement of continuous monitoring strategies, standard operating procedures, and cybersecurity best practices.
• Support compliance, audit, and assessment activities related to Department of Defense cybersecurity requirements.

Qualifications

• Demonstrated experience in cybersecurity monitoring, threat detection, incident analysis, or Security Operations Center (SOC) environments.
• Ability to analyze and interpret security events, logs, alerts, and vulnerability findings.
• Experience performing control assessments and identifying security gaps within enterprise environments.
• Strong analytical, problem-solving, and communication skills.
• Ability to work independently as well as collaboratively within a mission-focused team.
• S. citizenship and ability to obtain and maintain all required government security clearances, as applicable.
• One or more of the following certifications:
  • CompTIA Security+ CE
  • CompTIA CySA+
  • GIAC Certified Incident Handler (GCIH)
  • Splunk Core Certified User or equivalent Splunk certification
  • Comparable cybersecurity operations certification

Requirements

• Possess current Secret Clearance plus one of the following:
  • Associate's or Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related technical field with a minimum of four (4) years of experience in cybersecurity monitoring, cyber defense, incident response, or Security Operations Center (SOC) operations.
  • Minimum of six (6) years of directly relevant cybersecurity, computer network defense, or SOC experience in lieu of a degree.

Technical Skills & Knowledge

• Security Information and Event Management (SIEM)
• Splunk
• ArcSight
• Comparable SIEM and log management platforms
• Vulnerability and Security Monitoring Tools
• Tenable Nessus
• AWS Inspector
• AWS GuardDuty
• Enterprise network monitoring and security monitoring tools
• Cybersecurity Knowledge Areas:
  • Computer Network Defense (CND) operations
  • Security event monitoring and analysis
  • Threat detection and incident escalation
  • Vulnerability management
  • Network security principles and protocols
  • Continuous monitoring programs
  • Cybersecurity metrics and reporting
  • Security control assessments and gap analysis
  • Cloud security monitoring and AWS security services
  • Incident response processes and cyber defense best practices

Location

Mechanicsburg, PA. Remote work may be authorized. Employees working remotely must reside within commuting distance of an approved SIPRNet access location and be available to support classified work requirements as needed.

Clearance

Active Secret

Travel

Some CONUS travel required

Equal Opportunity Statement

Seneca Holdings provides equal employment opportunities to all employees and applicants without regard to race, color, religion, sex/gender, sexual orientation, national origin, age, disability, marital status, genetic information and/or predisposing genetic characteristics, victim of domestic violence status, veteran status, or other protected class status. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, placement, promotion, termination, layoff, recall, transfer, leave of absence, compensation and training. The Company also prohibits retaliation against any employee who exercises his or her rights under applicable anti-discrimination laws. Notwithstanding the foregoing, the Company does give hiring preference to Seneca or Native individuals. Veterans with expertise in these areas are highly encouraged to apply.