Senior Cyber Incident Handling Analyst

• Posted 2 days ago • Updated 1 hour ago

Full Time

SOS International LLC (SOSi)

Fitment

Dice Job Match Score™

🎯 Assessing qualifications...

Job Details

Skills

Collaboration
IDS
Event Management
SIEM
Evaluation
Regulatory Compliance
Articulate
Leadership
Security Clearance
Business Analytics
Business Analysis
Computer Science
Science
Business Administration
Mathematics
Cisco
Microsoft
Intrusion Detection
Information Management
Cyber Security
Reporting
Management
DoD
Incident Management
Security Operations
System On A Chip

Summary

Company Description

Founded in 1989, SOSi is among the largest private, founder-owned technology and services integrators in the defense and government services industry. We deliver tailored solutions, tested leadership, and trusted results to enable national security missions worldwide.

Job Description

Overview

***This position is contingent upon contract award.***

SOSi is seeking a Senior Cyber Incident Handling Analyst in Wiesbaden, Germany. The ideal candidate will possess senior-level expertise in managing the full lifecycle of cyber security incidents. This role involves monitoring for malicious activity, triaging events, and leading the coordination between technical teams and leadership to ensure incidents are contained, remediated, and documented in support of theater-level mission requirements.

Essential Job Duties

Monitor and analyze Intrusion Detection Systems (IDS) and Security Information and Event Management (SIEM) platforms to detect malicious and anomalous activity.
Lead the evaluation of security events to determine if a formal incident has occurred, assessing the potential impact on theater operations.
Analyze data from various enterprise sources, including logs and packet captures, to draw definitive conclusions regarding past and future security incidents.
Coordinate high-pressure response efforts between technical engineering teams and non-technical stakeholders to ensure a unified and effective defense posture.
Maintain expert-level knowledge of hacker Tactics, Techniques, and Procedures (TTPs) and the current threat landscape to better anticipate and respond to exploits.
Ensure every incident is meticulously documented from initial detection through final resolution, maintaining a clear record for after-action reporting and compliance.
Articulate investigative findings and incident status updates to both technical audiences and executive leadership.

Qualifications

Minimum Requirements

Active in scope TS/SCI clearance.
BA/BS degree (Engineering, Computer Science, Science, Business Administration, or Mathematics) plus five (5) years of specialized experience OR Associate's degree plus seven (7) years of specialized experience OR a major professional certification plus seven (7) years of specialized experience OR eleven (11) years of specialized experience.
Possession of at least one of the following: Cisco Certified CyberOps Professional or GIAC: GCED IH FA FE or GMON or GNFA or Blue Team Level 2 (BLT2) or Microsoft Certified: Cybersecurity Architect Expert or Offensive Security Defense Analyst (OSDA).
Demonstrated experience monitoring intrusion detection and security information management systems.
Proven experience triaging and evaluating detected events to determine incident status.
Ability to analyze data, such as logs or packet captures, to draw conclusions regarding security incidents.
Experience coordinating response to incidents with both technical and non-technical parties.
Expert knowledge of hacker techniques (TTPs) and the current security threat landscape.
Experience documenting incidents from initial detection through final resolution.

Preferred Qualifications

Familiarity with Cybersecurity Service Provider (CSSP) reporting requirements.
Experience utilizing Case Management Systems for tracking cyber incidents.
Knowledge of DoD 8500-series instructions and CJCSM 6510.01B (Cyber Incident Handling Program).
Prior experience in a theater-level Security Operations Center (SOC) or Cyber Defense Center.

Additional Information

Work Environment

Normal office conditions with potential to perform duties in deployed locations.
May be requested to work evenings and weekends to meet program and contract needs.

Working at SOSi

All interested individuals will receive consideration and will not be discriminated against for any reason.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 10237746
Position Id: 3743990011301631
Posted 2 days ago

Company Info

About SOS International LLC (SOSi)

Since 1989, SOSi has provided specialized services supporting the national security interests of the United States and the security and stability needs of its allies.

We excel at providing logistics, construction, training, intelligence and information technology solutions to our clients in the defense, diplomatic, intelligence and law enforcement communities.

Decades of successful business have earned SOSi a well-deserved reputation for reliability and excellence in the government contracting industry. Originally founded to provide specialized language support to the law enforcement community, SOSi has grown into a diverse company with a broad portfolio of clients and service offerings. Our ability to enter new markets and deliver integrated solutions to complex challenges has been the hallmark of our growth into a large business with global reach.

Since 2002, SOSi s compounded annual growth rate has exceeded 30%, fueled by growth and diversification of SOSi s core businesses. In 2016, SOSi made its first acquisition, adding New World Solutions (NWS) to the portfolio of SOSi companies. NWS enhances SOSi s intelligence service offerings, adding highly sought after capabilities in data and imagery science, overhead persistent infrared (OPIR) and cyber solutions.

Whether the mission involves systems engineering and intelligence analysis supporting the U.S. military in Europe or operating bases that house thousands of clients in Iraq, we re ready to go where you need us.

At SOSi, it s always Challenge Accepted!

SOSi s unique approach to business features:

-An experienced team For over a quarter century, SOSi has delivered quality program management. We have proven business processes, corporate infrastructure and credentialed professionals that ensure project success.

-A client-centric approach As a family owned business, we bring a passion and commitment to our customers jobs that companies with institutional or public ownership simply do not offer. We are personally vested in our customers' success.

-Fully integrated solutions We do more than just staff a project. We develop holistic solutions that meet our customers needs. Innovation, efficiency and quality are the hallmarks of our work.

-An international perspective With experience in over 30 countries across Latin America, Europe, Africa, the Middle East and Asia, SOSi understands how to manage complex projects both at home and abroad.

-Willingness to take calculated risks SOSi is as comfortable working in the national capital region of the United States as it is supporting its clients in remote, austere and dangerous places. We go wherever you need us.

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.