Cybersecurity Shift Incident Manager

Triangle Cyber, LLC • Arlington, VA

3d • Onsite

About The Position

Triangle Cyber is seeking multiple Cybersecurity Incident Managers to provide on-site incident management support for a large federal client. The role focuses on Computer Network Defense (CND) incident triage, incident analysis and correlation, and helping identify and mitigate cybersecurity threats across enterprise IT networks.

Requirements

• Active Top Secret clearance.
• At least 2 years of directly relevant experience in cyber incident management or cybersecurity operations.
• A Bachelor of Science or higher in Computer Science, Cybersecurity, Information Technology, or a related field; alternatively, a high school diploma with at least 4 years of hands-on incident management or cybersecurity experience.
• Knowledge of incident response and handling methodologies.
• Knowledge of NIST 800-62 (latest revision) and FISMA standards as they pertain to incident reporting.
• Knowledge of the National Cyber Incident Scoring System to prioritize incident triage.
• Knowledge of general attack stages, including footprinting and scanning, enumeration, gaining access, privilege escalation, maintaining access, network exploitation, and covering tracks.
• Skill in recognizing and categorizing types of vulnerabilities and associated attacks.
• Knowledge of basic system administration and operating system hardening techniques, as well as Computer Network Defense policies, procedures, and regulations.
• Knowledge of different operational threat environments, including first-generation script kiddies, second-generation non-nation-state-sponsored actors, and third-generation nation-state-sponsored actors.
• Knowledge of system and application security threats and vulnerabilities, including buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channels, replay, return-oriented attacks, and malicious code.

Nice To Haves

• Knowledge of different operational threat environments, including first-generation script kiddies, second-generation non-nation-state-sponsored actors, and third-generation nation-state-sponsored actors.
• Knowledge of system and application security threats and vulnerabilities, including buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channels, replay, return-oriented attacks, and malicious code.
• GIAC Certified Incident Handler (GCIH).
• GIAC Certified Forensic Analyst (GCFA).
• GIAC Information Security Professional (GISP).
• GIAC Certified Enterprise Defender (GCED).
• Certified Cyber Forensics Professional (CCFP) (retired).
• Certified Information Systems Security Professional (CISSP).

Responsibilities

• Perform Computer Network Defense (CND) incident triage, including determining scope, urgency, and potential impact.
• Correlate incident data to identify trends in reported incidents.
• Recommend defense-in-depth principles and practices, including defense in multiple places, layered defenses, and security robustness.
• Research and compile known resolution steps or workarounds to enable mitigation of potential CND incidents within the enterprise.
• Apply cybersecurity concepts to the detection and defense of intrusions into small- and large-scale IT networks, and conduct cursory analysis of log data.
• Monitor external data sources to stay current on CND threat conditions and determine which security issues may affect the enterprise.

What This Job Offers

• Job Type: Full-time