Incident Manager
Introduction:
The Incident Manager will be responsible for correlating incident data, recommending defense in depth principles, performing incident triage, researching and compiling known resolution steps, applying cybersecurity concepts, monitoring external data sources, identifying incident causes, tracking and documenting incidents, and working with other components to resolve ongoing incidents.
Responsibilities:
- Correlating incident data to identify specific trends in reported incidents
- Recommending defense in depth principles and practices
- Performing Computer Network Defense incident triage
- Researching and compiling known resolution steps
- Applying cybersecurity concepts to detect and defend intrusions
- Monitoring external data sources for threat conditions
- Identifying and analyzing incident causes
- Receiving and analyzing network alerts
- Tracking and documenting incidents
- Working on shift schedules and triaging incidents
Required Skills:
- U.S. Citizenship
- Active TS/SCI clearance
- Ability to obtain DHS Suitability
- 5+ years of experience in cyber incident management or cybersecurity operations
- Knowledge of incident response methodologies
- Familiarity with NIST 800-62 and FISMA standards
- Ability to prioritize incidents and investigate phishing tactics
- Knowledge of attack stages and vulnerability types
- Skills in system administration and operating system hardening
- Understanding of Computer Network Defense policies and regulations
Desired Skills:
- Knowledge of different operational threat environments
- Understanding of system and application security threats
Required Education:
BS in Incident Management, Operations Management, Cybersecurity, or related field. HS Diploma with 7-9 years of incident management or cybersecurity experience.
Desired Certifications:
GCIH, GCFA, GISP, GCED, CCFP, or CISSP
