Computer Network Defense (CND) Analyst

Position Summary

The CND analyst supports NAVFAC engineering operations by continuously monitoring enterprise networks and operational technology (OT) and industrial control systems (ICS). The analyst reviews alerts, logs, vulnerabilities, and device information; identifies and communicates potential risks; and escalates findings under approved SOC procedures. The role also prepares technical documentation for Risk Management Framework (RMF) activities and monthly status reports (MSRs). The assigned duties center on cyber defense analysis.

Work Environment

• Work Location: National Capital Region (NCR)
• Security Clearance: Top Secret
• Salary: $100K

Compensation

Karthik Consulting is committed to providing competitive compensation based on the responsibilities of the role, required qualifications, security clearance level, relevant experience, certifications, customer requirements, geographic location, and overall business needs. The salary range listed for this position represents a good-faith estimate of the current compensation range for this role.

At Karthik Consulting, it is not typical for an individual to be hired at or near the top of the salary range. Final compensation decisions are based on the facts and circumstances of each candidate's experience, qualifications, certifications, clearance level, contract requirements, and overall alignment with the role.

Employees may be eligible for company benefits and additional compensation programs, subject to company policy, contract requirements, and individual eligibility.

Program Context

Program Description

Support NAVFAC technical and engineering stakeholders in environments that may include facility-related control systems, OT/ICS devices, on-premises infrastructure, and cloud enterprise networks. Perform assigned watch duties within approved access, monitoring, and escalation procedures.

Program Scope

Continuous monitoring and alert triage; basic network and device analysis; OT/ICS-aware risk identification; escalation to journeyman or senior SOC staff; technical and RMF documentation; documentation control; and MSRs. Coordinate further investigation and mitigation recommendations with senior personnel.

Key Responsibilities

CONTINUOUS MONITORING AND SOC WATCH

• Perform assigned watch functions and review security alerts, event logs, network traffic, and other approved monitoring outputs for anomalous activity.
• Triage findings, record the supporting evidence and severity, and follow established procedures for tracking and handoff.
• Support continuous monitoring of on-premises and cloud environments using authorized tools and procedures.

OT ICS AND NETWORK ANALYSIS

• Analyze available information on networked technology devices, including OT/ICS, SCADA, and facility-related systems when assigned.
• Apply knowledge of TCP/IP, network segmentation, firewalls, and common protocols to identify risks and explain their operational impact.
• Coordinate with system owners and senior analysts before recommending changes that could affect sensitive operational systems.

RMF DOCUMENTATION AND REPORTING

• Prepare and maintain technical procedures, monitoring records, control evidence, and other documentation supporting RMF and NAVFAC engineering operations.
• Track document versions, approvals, and revisions in accordance with the program's documentation-control process.
• Prepare accurate monthly status reports (MSRs) summarizing monitoring work, findings, escalations, risks, and progress against assigned tasks.

ESCALATION COLLABORATION AND DEVELOPMENT

• Escalate suspected incidents and material findings to the designated journeyman or senior SOC analyst under predetermined pathways.
• Communicate risks and practical mitigation recommendations to appropriate stakeholders when the available evidence supports them.
• Identify learning needs, request mentorship from senior team members, and complete relevant training to expand technical capability.

Qualifications

Education

High school diploma or GED equivalent required. Associate's or bachelor's degree in cybersecurity, information technology, computer science, engineering, or a related field preferred.

Professional Certifications

Current CompTIA Security+ or another credential accepted for the assigned DoD 8140 cyber work role and proficiency level required. CySA+, GICSP, GRID, GMON, Cisco CyberOps Associate, or CCNA preferred as relevant to the assignment.

Minimum Qualifications

• At least 3 years of relevant IT, cybersecurity, network security, or SOC experience.
• Experience reviewing alerts and logs, performing basic network analysis, documenting findings, and following incident-escalation procedures.
• Working knowledge of continuous monitoring, TCP/IP networks, and the risks of OT/ICS or other operational systems.
• Clear technical writing and the ability to work with senior analysts and system stakeholders.

Preferred Qualifications

• 2 or more years of SOC or continuous-monitoring experience and 1 or more year supporting OT/ICS, SCADA, building automation, or facility control systems.
• DoD, Navy, or NAVFAC experience; familiarity with RMF artifacts, POA&Ms, control evidence, and operational reporting.
• Experience with SIEM, IDS/IPS, vulnerability tools, packet analysis, and cloud security monitoring.