Incident Manager - II

Base One Technologies - Arlington, VA

Full-time - Mid Level

Arlington, VA

Professional, Scientific, and Technical Services

About the position

The Incident Manager - II at Base One Technologies is responsible for managing and mitigating Computer Network Defense incidents within the enterprise. This role involves applying cybersecurity knowledge to detect and respond to threats, conducting analysis of log data, and coordinating with various teams to resolve incidents effectively. The position requires a strong understanding of incident response methodologies and the ability to work collaboratively across different locations.

Responsibilities

• Researching and compiling known resolution steps or workarounds to enable mitigation of potential Computer Network Defense incidents within the enterprise
• Applying knowledge of the tactics, techniques, and procedures of various threat actors to identify and validate threats
• Applying cybersecurity concepts to the detection and defense of intrusions into IT networks
• Conducting cursory analysis of log data
• Monitoring external data sources to maintain currency of Computer Network Defense threat conditions
• Identifying the cause of an incident and recognizing key elements to ask external entities
• Receiving and analyzing network alerts and determining possible causes
• Tracking and documenting Computer Network Defense incidents from detection through resolution
• Working with other components within the organization to obtain and coordinate information pertaining to ongoing incidents
• Providing support during assigned shifts, including weekends

Requirements

• U.S. Citizenship
• Active TS/SCI clearance
• Ability to obtain DHS Suitability
• 2+ years of directly relevant experience in cyber incident management or cybersecurity operations
• Knowledge of incident response and handling methodologies
• Knowledge of the NCCIC National Cyber Incident Scoring System
• Knowledge of general attack stages
• Skill in recognizing and categorizing types of vulnerabilities and associated attacks
• Knowledge of basic system administration and operating system hardening techniques
• Knowledge of Computer Network Defense policies, procedures, and regulations
• Knowledge of different operational threat environments
• Knowledge of system and application security threats and vulnerabilities
• Ability to work collaboratively across physical locations

Nice-to-haves

• Knowledge of basic system administration and operating system hardening techniques
• Knowledge of Computer Network Defense policies, procedures, and regulations
• Knowledge of different operational threat environments
• Knowledge of system and application security threats and vulnerabilities