Cyber Security Engineer

Job Title: Cyber Security Engineer
Location: Springfield, VA

Type: Contract To Hire
Compensation:
Contractor Work Model: Onsite
Hours: Add the job's scheduled days and times (delete if not needed)
Security Clearance: List security clearance requirements (delete if not needed)

Cyber Security Engineer
Springfield, VA
TS/SCI
$135k

What You'll Get to Do:

• Coordinate and implement cyber security response tasks, including:
  
  • Performing analysis and documentation
  • Implementing containment measures (e.g., IP/domain blocks, disabling user accounts per Government direction)
• Coordinate with:
  
  • Security and Installations Directorate (SI)
  • Office of Counterintelligence (SIC)
  • Insider Threat Office (SIII)
  • Law enforcement and counterintelligence personnel for advanced incident triage
• Collaborate with appropriate authorities to produce security incident reports
• Categorize security incidents and events
• Ensure proper incident reporting, containment, and eradication by coordinating with:
  
  • Other contracts
  • Organizations
  • Activities and services
• De-conflict red/blue team activity with open incidents/events
• Ensure full recovery from incidents/events across the NGA enterprise
• Build timelines, briefings, documentation, and other products to inform stakeholders of:
  
  • Incident response actions
  • Adversary activities
  • Blue force (defensive) responses
• Log detailed actions and analysis in the authorized ticketing system to enable full reconstruction of events

More About the Role:

• Generate and update incident reports in:
  
  • Joint Incident Management System (JIMS)
  • Incident Case Management System (ICMS)
  • Other authorized systems as directed
• Develop and execute (with Government approval) custom tools, scripts, and capabilities for data collection and incident response
• Perform digital forensics and media analysis on host, server, and network data, including:
  
  • Volatile/non-volatile memory
  • System artifacts
• Develop and disseminate indicators of compromise (IOCs) to cybersecurity stakeholders
• Provide adversary attribution and perform malware analysis/signature development
• Coordinate with CSOC Tier 1 & 2 teams to:
  
  • Remediate discrepancies
  • Provide recommendations to prevent reoccurrence

Position Requirements
You'll Bring These Qualifications:

• Bachelor's degree or 6+ years of cybersecurity experience (CSOS)
• Active TS/SCI clearance; ability to obtain polygraph
• DoDD 8140.01 and DoD 8570.01-M:
  
  • IAT Level II
  • CSSP Incident Responder
• Provide input and coordination for:
  
  • Daily CSOC Significant Activity Report
  • Daily CSOC Operations Update
  • Weekly CSOC Status Report
• Serve as a C-IRT member under Government C-IRT Commander direction
• Develop and coordinate courses of action with Government/contract stakeholders
• When authorized, execute Defensive Cyberspace Operations - Internal Defensive Measures (DCO-IDM) on NGA networks
• Perform malware reverse engineering and digital media analysis
• Develop and execute custom scripts, tools, and capabilities (as authorized)
• Deliver incident investigation reports within 30 days of C-IRT stand-down, covering:
  
  • Full incident lifecycle
  • Host/network analysis
  • Recommendations for TTP improvements
• Conduct weekly Quality Control reviews of closed Tier 2 CSOC tickets to ensure:
  
  • Proper categorization
  • Thorough documentation
  • Appropriate notifications

These Qualifications Would Be Nice to Have:

• Master's degree
• IAT Level III certification

System One, and its subsidiaries including Joul, ALTA IT Services, and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.

#M2
#LI-CS1
#DI-CS1

Ref: #850-Rockville (ALTA IT)

System One, and its subsidiaries including Joul, ALTA IT Services, TeamPeople, and Mountain Ltd., are leaders in delivering outsourced services and workforce solutions across North America. We help clients get work done more efficiently and economically, without compromising quality. System One not only serves as a valued partner for our clients, but we offer eligible employees health and welfare benefits coverage options including medical, dental, vision, spending accounts, life insurance, voluntary plans, as well as participation in a 401(k) plan.

System One is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, age, national origin, disability, family care or medical leave status, genetic information, veteran status, marital status, or any other characteristic protected by applicable federal, state, or local law.