Cybersecurity Analyst / Incident Response Coordinator (On-Site)

Oxley Enterprises • Alexandria, VA

5d • $101,526 - $132,689 • Onsite

About The Position

We are seeking a Cybersecurity Analyst / Incident Response Coordinator to oversee incident response, vulnerability management, and threat analysis for a federal agency's IT security program. This role combines hands-on cyber and incident lifecycle management. The Cybersecurity Analyst / Incident Response Coordinator provides technical support and project and incident response lifecycle oversight.

Requirements

• 3 - 10 years of cyber incident response experience
• Bachelors' Degree in Cybersecurity, Information Technology, or a related field
• Excellent experience providing oversight for the entire incident response lifecycle from initial detection to final remediation and incident closure
• Excellent experience with Security Information and Event Management (SIEM) tools
• Excellent experience with Security Orchestration, Automation, and Response (SOAR) platforms
• Above average experience providing final decisions on technical containment strategies
• Above average experience overseeing vulnerability management and scanning operations (e.g., Tenable)
• Above average experience managing daily tasking of a team
• Above average experience ensuring compliance with applicable retention policies
• Above average experience translating incident data into high-level trend analysis and status reports for leadership
• Excellent verbal and written communication skills
• Ability to obtain/maintain a Federal Civilian Public Trust
• U.S. Citizenship or Permanent Resident that has lived in the United States for at least 3 years

Nice To Haves

• Experience supporting a federal agency

Responsibilities

• Verifies support staff are meeting contract deliverables and services
• Identifies obstacles preventing support staff from performing their responsibilities and addresses them
• Develops and provides monthly, weekly, and ad hoc status reports to leadership
• Maintains project plans tracking risks, issues, and completed/upcoming tasks
• Briefs leadership monthly and attends all cyber-related meetings
• Develops and maintains an Incident Response Plan
• Provides incident response support
• Alerts the Incident Response Team of security advisories, vulnerabilities, and new threats
• Analyzes incidents and briefs recommendations quarterly to leadership
• Records and catalogs lessons learned, maintaining a searchable repository
• Conducts investigation and analysis of cybersecurity incidents
• Develops and maintains the Vulnerability Management Plan and related Standard Operating Procedures (SOPs)
• Conducts risk and vulnerability assessments using tools such as Tenable, IBM BigFix, and Splunk
• Oversees creation and accurate documentation of Plan of Action and Milestones (POA&Ms)
• Coordinates with the cyber operations team to remediate identified vulnerabilities
• Tracks and reports vulnerability trends, providing monthly, quarterly, and annual metrics
• Integrates automated threat intelligence feeds into the Enterprise SIEM
• Analyzes threats against the environment and provides cyber situational awareness
• Oversees insider threat investigations and manages the tool in accordance with ITIL-compliant Service Level Agreements (SLAs)

Benefits

• Medical, dental, vision and prescription drug coverage for you and your family.
• Life Insurance, short-term disability and long-term disability paid for by the Company.
• Supplemental coverages including Accident, Critical Illness, and Hospital.
• Additional Life insurance coverage for you and your dependents.
• 401k plan with various options to select based on your retirement goals.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level