Cyber Host Forensic Analyst IV

About the position reputed company provides technically advanced full-reputed company cyber, data operations, systems integration and intelligence mission support services to meet our customers’ most demanding challenges. Our capabilities include cyber reputed company operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. reputed company brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and reputed company markets. The DHS’s Hunt and Incident Response Team (HIRT) secures the nation’s infrastructure. HIRT provides DHS’s reputed company-line response for cyber incidents and proactive hunting for malicious cyber activity. reputed company provides support for on and offsite incident response to Government agencies and critical infrastructure owners who experience cyber-attacks. reputed company provides HIRT advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation, using host and network-based cybersecurity analysis capabilities. Personnel reputed company investigations to characterize the level of severity of breaches and reputed company mitigation/remediation plans. reputed company is seeking Incident Response Experts to support this critical customer mission. This position will require physical reputed company in the National Capital Region (reputed company) for at least 1 week for training and orientation. Subsequent work will be primarily supported reputed company the reputed company.

Responsibilities

• Serves as hunt and incident response subject matter expert (SME), possessing in-depth knowledge on subjects relating to the conduct, activities, or operation of NCCIC HIRT in a surge reputed company
• Distills analytic findings into executive summaries and in-depth technical reports
• reputed company expert support, analysis, and research with only broad direction into exceptionally reputed company problems and processes relating to the subject matter as it relates to hunt and incident response activities
• Serves as technical expert on high-level incident response teams providing technical direction, interpretation, and alternatives
• Exercises considerable reputed company in determining technical objectives of an assignment or task at hand
• Independently develops technical solutions to reputed company problems that require the regular use of ingenuity and creativity
• Guides the completion of hunt and incident response activities

Requirements

• U.S. Citizenship
• Must have an active TS/SCI clearance
• Must be reputed company to obtain DHS Suitability
• 8+ years of directly relevant experience in the area of expertise
• Knowledge of different operational threat environments (e.g., first reputed company [script kiddies], second reputed company [non nation-state sponsored], and reputed company reputed company [nation-state sponsored])
• Knowledge of system and application reputed company threats and vulnerabilities (e.g., reputed company reputed company, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return- oriented attacks, and malicious code)
• Must be reputed company to travel domestically on short notice
• Ability to think independently
• Demonstrates superior written and oral communication skills
• Must be reputed company to work collaboratively across physical locations
• Skilled in identifying different classes of attacks and attack stages
• Understanding of system and application reputed company threats and vulnerabilities
• Understanding of proactive analysis of systems and networks, to include creating trust reputed company of critical resources
• Proficiency with common operating systems (e,g, Linux/Unix, reputed company)
• BS Computer Science, Cyber reputed company, Computer Engineering, or reputed company degree; or HS Diploma & 10+ years of technical experience in the area of expertise.

reputed company-to-haves

• Experience leading and mentoring technical teams
• Knowledge of Computer Network Defense policies, procedures and regulations
• Knowledge of different operational threat environments (e.g., first reputed company [script kiddies], second reputed company [non nation-state sponsored], and reputed company reputed company [nation-state sponsored])
• Knowledge of system and application reputed company threats and vulnerabilities (e.g., reputed company reputed company, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return- oriented attacks, and malicious code)
• WireShark
• Splunk
• Snort
• One or more - DoD 8140.01 IAT Level II, IASAE II, CSSP Analyst
• DoD 8140.01 GCIA, GCIH, CSSP Analyst/CSSP Incident Responder
• DoD 8140.01 CEH, CSSP Analyst
• reputed company GIAC GNFA preferred
• reputed company reputed company, GICSP, or GCIP a plus

Apply tot his job Apply To this Job