CSOC Tier 3 Analyst III
RISA•Springfield, VA
•$87,000 - $95,000•Onsite
About The Position
Incident Responder / Malware Analyst (CSOC Tier 3) Cyber Security Operations Specialist III - CSOC Tier 3. This is the top of the escalation chain: containment, eradication, and recovery, plus malware and implant analysis and forensic artifact work. When a Cyber Incident Response Team stands up, you work under the Government CIRT Commander; between incidents, you run the exercises that make the next response better. You will talk to the owner here, not a recruiting queue.
Requirements
- U.S. citizenship and an active TS/SCI.
- Ability to successfully obtain and maintain a Government polygraph after hire.
- Bachelor's degree in a field applicable to the position plus 6 years of relevant experience. Equivalents accepted - Master's plus 4, Associate's plus 8, or High School diploma/GED plus 10.
- DoD 8140.01 / 8570.01-M IAT Level II and CSSP Incident Responder; IAT Level III and CSSP Incident Responder must be held or obtained within six months of start.
- Hands-on incident response: containment, eradication, and recovery.
- Host, network, and memory forensics, and malware analysis.
- Documentation disciplined enough that every action and analysis can be reconstructed from the ticket.
Nice To Haves
- Master's degree.
- IAT Level III already in hand.
Responsibilities
- Implement containment measures during incidents - IP and domain blocks, account disablement - at Government direction.
- Perform digital media analysis on host, server, and network data, including volatile and non-volatile memory.
- Perform malware analysis and reverse engineering, and develop signatures and indicators of compromise.
- Categorize incidents, build timelines, and brief stakeholders on adversary activity and response actions.
- Coordinate with counterintelligence, insider threat, and law enforcement partners on advanced investigation and triage.
- Develop and, when authorized, run custom scripts and tools to collect and analyze data.
- Write incident investigation reports covering the full lifecycle of each incident, with corrective and TTP recommendations.
- Contribute to daily and weekly CSOC reporting, and quality-check a share of closed Tier 2 tickets each week.
Benefits
- Medical, dental, and vision insurance
- 401(k) and Roth
- Paid Time Off
- 11 paid Federal Holidays
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
Upload and Match Resume
What This Job Offers
Job Type
Full-time
Career Level
Senior
