What are the responsibilities and job description for the Incident Response Coordinator (Hybird) position at Castalia Systems?
Position Type: Full Time
Work Site: Hybrid, Must live near Morrisville, NC
Clearance: Ability to obtain Public Trust prior to start
Must be a US citizen
Job Summary
Castalia Systems is looking for a Incident Response Coordinator to join our team on the USPS Contract on the Digital Forensics and Incident Response Team. As a member of the USPS contract, you will be part of the team that supports approximately 5000 servers and 150,000 workstations. Our team is responsible for ensuring the Post Offices information assets and technologies are protected from cybersecurity attacks. This contract is constantly growing in size and will provide opportunities to grow your skillset or obtain new ones via collaborative projects with other cybersecurity disciplines.
Roles and Responsibilities
- Support the development of staff schedules and staffing forecasts for approval.
- Ensure shift members follow the appropriate incident escalation and reporting procedures.
- Provides support promptly and efficiently through front-line telephone and email communications.
- Ingest, triage, prioritize, assign, track, document, and manage incidents and results
- Provide technical support in response to computer security incidents
- Correlate, map, and fuse any and all incident information for the development and distribution of cyber alerts and notices, or other products as Required
- Document technical details of current or potential intruder threats consistent with NIST 800-61: Computer Security Incident Handling Guide. Must be flexible and able to work within a 24X7X365 support environment.
- Manage information, requests, that may be considered out of the scope of the incident management service and route appropriately
- Coordinate, communicate, share information, and work closely with USPS components
- Assist with developing and maintaining Standard Operating Procedures
Required Qualifications
- Must posse a Bachelors Degree in a technical specialty such as cyber security, computer science, management information systems or related IT field .
- 8 years of experience in computer forensics or vulnerability analysis.
- 8 years of experience in information security, especially in an incident response role.
- 1 year experience as a certified investigator.
- Must demonstrate a solid understanding of cyber security analysis, incident response, incident handling, and a proven an incident response team.
- Experience with Splunk, Sentinel One, Armis, SNA preferred
Desired/Preferred qualifications
- Masters Degree in a technical specialty such as cyber security, computer science, management information systems or related IT field
- One or more of the following certifications:
- Certified Investigator
- CISSP
- GCIH
- GPEN
Education
- Must posse a Bachelors Degree in a technical specialty such as cyber security, computer science, management information systems or related IT field .
Travel
- As needed
Company Information
At Castalia Systems, we're not just another company we're a certified Woman Owned Small Business (WOSB) and Small Disadvantage Business (SDB) committed to excellence since 2011. Join us in delivering top-tier solutions to the dynamic Defense and Intelligence sector.
As valued members of our team, we prioritize your well-being. Enjoy a comprehensive benefits package, including medical, dental, and vision coverage, 401k matching, generous PTO, paid holidays, professional training opportunities, and even pet insurance to ensure your furry friends are cared for too.
EEO
Castalia Systems is an equal employment opportunity and affirmative action employer and strives to comply with all applicable laws prohibiting discrimination based on race, color, creed, sex, sexual orientation, age, national origin, or ancestry, physical or mental disability, veteran status, marital status, HIV-positive status, as well as any other category protected by federal, state, or local laws. All such discrimination is unlawful, and all persons involved in the operations of the company are prohibited from engaging in this type of conduct.
