Intermediate Cyber Defense Incident Responder

Req ID: 40420

Summary

Intermediate Cyber Defense Incident Responder

Washington, D.C.

Are you ready to enhance your skills and build your career in a rapidly evolving business climate? Are you looking for a career where professional development is embedded in your employers core culture? If so, Chenega Military, Intelligence & Operations Support (MIOS) could be the place for you! Join our team of professionals who support large-scale government operations by leveraging cutting-edge technology and take your career to the next level!

The Intermediate Cyber Defense Incident Responder is responsible for investigating, analyzing, and responding to cyber incidents within the network environment or enclave.

Responsibilities

• Collect intrusion artifacts (e.g., source code, malware, trojans) and use discovered data to enable mitigation of potential cyber defense incidents within the enterprise.
• Coordinate and provide expert technical support to enterprise-wide cyber defense technicians to resolve cyber defense incidents.
• Coordinate incident response functions.
• Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat conditions and determine which security issues may have an impact on the enterprise.
• Perform cyber defense trend analysis and reporting.
• Perform initial, forensically sound collection of images and inspect to discern possible mitigation/remediation on enterprise systems.
• Receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts.
• Write and publish after-action reviews.
• Write and publish cyber defense techniques, guidance, and reports on incident findings to appropriate constituencies.
• Other duties as assigned.

Qualifications

• Bachelor's degree in Cybersecurity or a related discipline
• Additional years of experience can be used in lieu of a degree
• 5+ years of experience in incident response and/or breach response
• CompTIA PenTest+, CompTIA CySA+, EC-Council CEH or equivalent certification
• Must be able to pass a Criminal and Financial Background Check prior to starting

Preferred Qualifications:

• Experience with Azure Sentinel and Microsoft Defender

Knowledge, Skills, and Abilities:

• Knowledge of business continuity and disaster recovery continuity of operations plans.
• Skill in preserving evidence integrity according to standard operating procedures or national standards.
• Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions.
• Knowledge of cyber defense and information security policies, procedures, and regulations.
• Skill in protecting a network against malware. (e.g., NIPS, anti-malware, restrict/prevent external devices, spam filters).
• Knowledge of incident categories, incident responses, and timelines for responses.
• Knowledge of incident response and handling methodologies.
• Skill in performing damage assessments.
• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).
• Skill in securing network communications.
• Skill in using security event correlation tools.
• Knowledge of network services and protocol interactions that provide network communications.
• Knowledge of the OSI model and underlying network protocols (e.g., TCP/IP).
• Knowledge of cloud service models and how those models can limit incident response.
• Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.
• Knowledge of system administration, network, and operating system hardening techniques.
• Knowledge of different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks).
• Knowledge of cyber attackers (e.g., script kiddies, insider threat, non-nation state-sponsored, and nation-sponsored).
• Knowledge of cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).
• Knowledge of malware analysis concepts and methodologies.
• Skill in identifying, capturing, containing, and reporting malware.
• Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, Procedural Language/Structured Query Language [PL/SQL] and injections, race conditions, covert channel, replay, return-oriented attacks, malicious code).
• Knowledge of what constitutes a network attack and a network attack's relationship to both threats and vulnerabilities.
• Skill in recognizing and categorizing types of vulnerabilities and associated attacks.

How youll grow

At Chenega MIOS, our professional development plan focuses on helping our team members at every level of their careers to identify and use their strengths to do their best work every day. From entry-level employees to senior leaders, we believe theres always room to learn.

We offer opportunities to help sharpen skills in addition to hands-on experience in the global, fast-changing business world. From on-the-job learning experiences to formal development programs, our professionals have a variety of opportunities to continue to grow throughout their careers.

Benefits

At Chenega MIOS, we know that great people make a great organization. We value our team members and offer them a broad range of benefits.

Learn more about what working at Chenega MIOS can mean for you.

Chenega MIOSs culture

Our positive and supportive culture encourages our team members to do their best work every day. We celebrate individuals by recognizing their uniqueness and offering them the flexibility to make daily choices that can help them be healthy, centered, confident, and aware. We offer well-being programs and continuously look for new ways to maintain a culture where we excel and lead healthy, happy lives.

Corporate citizenship

Chenega MIOS is led by a purpose to make an impact that matters. This purpose defines who we are and extends to relationships with our clients, our team members, and our communities. We believe that business has the power to inspire and transform. We focus on education, giving, skill-based volunteerism, and leadership to help drive positive social impact in our communities.

Learn more about Chenegas impact on the world.

Chenega MIOS News- ;br>
Tips from your Talent Acquisition Team

We want job seekers exploring opportunities at Chenega MIOS to feel prepared and confident. To help you with your research, we suggest you review the following links:

Chenega MIOS web site - ;br>
Glassdoor - _IE369514.11,23.htm

LinkedIn - ;br>
Facebook - ;br>
#Chenega Systems, LLC

Estimated Salary/Wage

USD $94,000.00/Yr. Up to USD $110,000.00/Yr.

Chenega Corporation and family of companies is an EOE.

Equal Opportunity Employer/Veterans/Disabled

Native preference under PL 93-638.

We participate in the E-Verify Employment Verification Program