About the Opportunity: On behalf of our client, we are currently seeking an experienced Cyber Incident Analyst with advanced knowledge in applying analytics in support of our client's enterprise network cyber defense capabilities As a Cyber Incident Detector you will have the opportunity to build strong lines of cyber defense using cutting-edge technologies. Your work in cyber security will have an impact on securing our clients' missions and ensuring we anticipate the threats of tomorrow. Required Clearance: AN ACTIVE DEPARTMENT OF DEFENSE TS/SCI SECURITY CLEARANCE IS REQUIRED IN ORDER TO APPLY.
Willingness to submit to and pass a Counter Intelligence (CI) Polygraph. Locations: Washington, DC
Reston, VA Flexibility Requirement: All shifts available. Must be willing to work a weekend or holiday shift supporting your assigned shift. Day Shift: 6am – 2:30pm
Swing Shift: 2pm – 10:30pm
Mid Shift: 10:30pm – 6am Functional Duties: Performs forensic analysis of digital information and gathers and handles evidence.
Identifies network computer intrusion evidence and perpetrators, and coordinates with other government agencies to record and report incidents. Must be passionate about technology and able to learn new security solutions rapidly.
Take the lead in day-to-day monitoring for unusual activities, implement defensive protocols, and report incidents. Forensic analysis of digital information, Open-Source Intel (OSINT) review/monitoring using available tools, both customer provided and open source, and pivoting/researching on previously reported Indicators of Compromise (IOCs). Participate in collaborative sessions with other CND service providers and Intelligence Community (IC) agencies on malicious intrusions, attacks or suspicious activities, as well as share emerging Cyber Threat Intel data. Assist in the development of IOCs for active defensive countermeasures and passive detection signatures. Skills and Abilities: Must have common knowledge of standard network infrastructure. Knowledge of domain masquerading, certificates, and file hashing. Familiar with monitoring emerging threats through Tools, Techniques, and Procedures (TTPs) and how they relate to the MITRE ATT&CK Framework Excellent written communications skills are necessary to properly document and report the identification and sharing of newly identified IOCs. Meticulous eye for detail and an ability to multitask in a fast-paced environment. Maintain knowledge of current cybercrime tactics. Required Education: HS/GED 12 years experience
Associates Degree 10 years experience
Bachelor’s Degree 8 years experience
Master’s Degree 6 years experience
PhD 4 years experience Required Certifications: 8750 IAT Level II: A minimum of one certification from the following; Security CE, CySA , GICSP, GSEC, CND, SCCP 8750 CSSP Analyst; A minimum of one certification from the following; CEH, CFR, CCNA Cyber Ops, CySA , GCIA, GCIH, CGICSP, Cloud , SCYBER, PenTest GIAC: GIAC Continuous Monitoring (GMON) Splunk: Splunk Core Certified User (SCCU)