Responsibilities:
·Serves as hunt and incident response subject matter expert (SME), applying in-depth knowledge on threat actor (TA) tools, techniques, and procedures (TTPs)
·Distills analytic findings into executive summaries and in-depth technical reports
·Provide expert support, analysis, and research with only broad direction into exceptionally complex problems and processes relating to the subject matter as it relates to hunt and incident response activities
·Serves as technical expert on high-level incident response teams providing technical direction, interpretation, and alternatives
·Exercises considerable latitude in determining technical objectives of an assignment or task at hand
·Independently develops technical solutions to complex problems that require the regular use of ingenuity and creativity
·Analyzes incident data and victim environments to recommend targeted mitigations
·Advise technical personnel on countermeasure implementation and customization
·Supports internal stakeholders on containment and eradication missions
·Documents analysis in a standardized knowledgebase for sharing and publication
·Assists in maintaining branch process and procedure documentation
·Guides the completion of hunt and incident response activities
Required Skills:
·U.S. Citizenship
·Must have an active TS/SCI clearance
·Must be able to obtain DHS Suitability
·5+ years of directly relevant experience in the area of expertise
·Must be able to travel domestically on short notice
·Strong understanding of network architecture/security
·Experience performing cyber incident response
·Ability to think independently
·Demonstrates superior written and oral communication skills
·Must be able to work collaboratively across physical locations
·Skilled in identifying different classes of attacks and attack stages
·Understanding of system and application security threats and vulnerabilities
·Understanding of proactive analysis of systems and networks, to include creating trust levels of critical resources
·Proficiency with common operating systems (e,g, Linux/Unix, Windows)
Desired Skills:
·Experience leading and mentoring technical teams
·Knowledge of Computer Network Defense policies, procedures and regulations
·Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored])
·Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return- oriented attacks, and malicious code)
·Network and System administration experience
·Strong understanding of adversarial tactics/techniques/procedures (TTPs)
·Experience with Identity and Access Management (IAM) tools
·Ability to review and analyze Enterprise Architecture (EA) from a security perspective
·Understanding of cyber defense-in-depth principles
·Hands-on skill in host/network intrusion detection
·Ability to perform event correlation
·Experience with malicious activity analysis
·Ability to collaborate with stakeholders at multiple levels within an organization
Required Education:
BS Computer Science, Cyber Security, Computer Engineering, or related degree; or HS Diploma & 7+ years of technical experience in the area of expertise.
Desired Certifications: One or more
·DoD 8140.01 IAT Level II, IASAE II, CSSP Analyst
·DoD 8140.01 GCIA, GCIH, CSSP Analyst/CSSP Incident Responder
·DoD 8140.01 CEH, CSSP Analyst
·SANS GIAC GNFA preferred
·SANS GRID, GICSP, or GCIP a plus
Incident Response Expert - III • Arlington, VA
Total Experience Required: 8 Years.ITIL Certified service management expert.Experience in managing infrastructure support Datacenter administration projects.Responsible for creating and establishin... Show more
Subject Matter Expert I Force Operations.SI) is now officially a 100% ESOP company! We value teamwork and collaboration, and this transition allows us to take that commitment to a new level.SI emp... Show more
Incident Manager III - TS/SCIArlington, VAJoin an outstanding team that offers exciting job opportunities with the goal of providing the absolute best support to our customers.Here at DigiFlight we... Show more
Counter-UAS Emerging Threat & Risk Analysis Team Lead.The Counter-UAS Emerging Threat & Risk Analysis Team Lead will direct a team responsible for identifying, assessing, and mitigating evolving un... Show more
A leading transportation company is seeking a Lead Cyber Watch Ops Analyst to enhance cybersecurity operations.The role involves supporting day-to-day functions of the Cyber Threat Command Center, ... Show more
Job DescriptionMission Support and Test Services, LLC (MSTS) manages and operates the Nevada National Security Site (NNSS) for the U.National Nuclear Security Administration (NNSA).Our MISSION is t... Show more
The Director of Case Management provides strategic and operational leadership for the health plan's enterprise case management function across two health plans under a centralized clinical operatio... Show more
Erias Ventures was founded to serve its customers with an entrepreneurial mindset.We value creative problem-solving, open communication, and empowering our employees to make decisions and put forth... Show more
The Opportunity: PM Role consisting of network engineering support to enhance, implement, and sustain boundary solutions that provide security boundaries between all Government networks, including ... Show more
SG2 Recruiting is seeking an information security manager to support IC client in the Washington DC Metro area.The information security manager (ISM) will apply their proactive approach to safeguar... Show more
Performance Expert (R2PC) - Fort Belvoir, VA.Around here, we define the future.We are a company of innovators, thinkers, creators, explorers, volunteers, and dreamers.But we all share one goal: to ... Show more
Incident Manager - III - IMG03.Government customer to provide cybersecurity vulnerability analysis support to reduce the prevalence and impact of vulnerabilities and exploitable conditions across F... Show more
Are you looking for your next challenge? Are you ready to work with a performance-based small company? At Zantech, we are a dynamic Woman Owned Small Business focused on providing complex, mission-... Show more
Opportunity Programs Compliance Specialist.Manages compliance requirements for workforce opportunity programs.This role oversees reporting, monitors trade partner compliance, and coordinates with p... Show more
Intermediate Watch Analyst (Senior Watch Officer).SGI is seeking an Intermediate Watch Analyst to support the Department of Homeland Security, Federal Protective Service (FPS), under the FPS Incide... Show more
Location Confidential, Columbia, MD, 21044, United States.Description Requirements Summary. Show more
Travel Special Procedures/Angio/IR Tech.Leonardtown, MD, United States.RCES/ARRT(R)/BCLS/BLS - American Heart Association.Titan Medical is looking for travelers to fill a Travel Special Procedures/... Show more
Havtech is seeking a dynamic, technically exceptional, and highly influential Operations Excellence Leader to accelerate performance across our Service, Supply (aftermarket and parts), Controls, an... Show more
Mission Support and Test Services, LLC (MSTS) manages and operates the Nevada National Security Site (NNSS) for the U.National Nuclear Security Administration (NNSA).Our MISSION is to help ensure t... Show more
Security & Law Enforcement (Master-at-Arms).This role is open to both entry-level applicants and candidates with prior experience.Those with a background in Law Enforcement, Corrections/Parole, or ... Show more
