Target Digital Network Analyst (TDNA) Annapolis Junction, MD $135,500-$150,500 per year Full Time This is a projected vacancy expected to become available in October 2026. We are seeking a Target Digital Network Analyst (TDNA) familiar with network-based adversary tactics, techniques, and procedures, network protocols, and common cyber vulnerabilities. This position will combine expert level research with analyzed intelligence community assessments and reports and open-source intelligence to support vulnerability discovery and mitigation efforts of United States National Defense platforms and Critical Infrastructure. This support includes writing intelligence reports, briefing and informing senior leadership, and traveling to cyber tabletop exercises (CTTXs) The ideal candidate will be responsible for: Conducting advanced analysis of SIGINT collection, open source data, network data and host data to ensure target community, to profile targets and their activities and develop techniques to gain more target information. Provide expert analytic support at both network and host level to identify and characterize anomalies on USG networks. Possesses knowledge of target technologies and applies skills and knowledge of digital networks and the applications on them to determine how targets communicate, move, operate, and live. Applies geospatial analysis techniques against network packet information, computer OS system data, executable file data, host data, and metadata collected from tasked communication system to identify anomalies, locate and track targets, and to accurately report the intelligence gained from the analysis to characterize anomalies on USG networks. Qualifications: - Minimum of 5 years of experience in 2 or more of the following: Cryptanalytic work in military or intelligence community organization Experience with either/or: Vulnerability assessment, pen testing, incident response, analysis networks and / or host forensics Computer Network Exploitation, Computer Network Attack - Minimum of at least 3 years of experience in 3 or more of the following: Microsoft windows operating systems, systems internals, file attributes; Executable file analysis; File Hasting and fuzzy file hashing Forensic analysis of Windows systems, Linux systems or mobile devices Commercial / GOTS tools for Intrusion detection Packet capture / evaluation, Network mapping / discovery Industry standard system/network tools Experience with NTOC/SID(S2) analysis and production working cyber adversary intrusion set/targets Preferred Qualifications: BS degree in Electrical / Computer / Software Engineering, Mathematics, Information Systems or Stem Related This is a projected vacancy expected to become available in October 2026. TS/SCI with FS polygraph is required.
What you'll do
- Conduct advanced multi-source analysis (SIGINT, OSINT, network traffic, host data) to profile adversary targets and characterize their TTPs
- Apply geospatial analysis techniques against network packets, OS artifacts, executable files, and metadata to locate and track targets on USG networks
- Identify and characterize anomalies on USG networks at both network and host levels using commercial and GOTS intrusion detection tools
- Produce written intelligence reports and analytic assessments synthesizing IC reporting with open-source intelligence
- Brief senior leadership on cyber threat findings and vulnerability mitigation recommendations
- Travel to and participate in cyber tabletop exercises (CTTXs) supporting National Defense and Critical Infrastructure stakeholders
- Apply knowledge of adversary digital network behavior to develop new collection and exploitation techniques
Mission
SIGINT-driven cyber threat analysis targeting adversary digital network activity to support vulnerability discovery and defense of US National Defense platforms and Critical Infrastructure
Required skills
- SIGINT analysis
- network traffic analysis / packet capture
- host forensics (Windows and/or Linux)
- vulnerability assessment or penetration testing
- computer network exploitation (CNE) or computer network attack (CNA)
- intrusion detection tools (commercial or GOTS)
- executable file analysis
- Windows OS internals and file system forensics