Incident manager II

Base One Technologies - Arlington, VA

Full-time - Entry Level

Arlington, VA

Professional, Scientific, and Technical Services

About the position

The Incident Manager II at Base One Technologies is responsible for managing and mitigating Computer Network Defense incidents within the enterprise. This role involves researching resolution steps, applying cybersecurity knowledge to detect and defend against intrusions, and monitoring external data sources to maintain awareness of the threat landscape. The position requires collaboration with various teams to track and document incidents from detection to resolution, ensuring a robust response to cybersecurity threats.

Responsibilities

• Researching and compiling known resolution steps or workarounds to enable mitigation of potential Computer Network Defense incidents within the enterprise
• Applying knowledge of the tactics, techniques, and procedures of various threat actors to identify and validate threats
• Applying cybersecurity concepts to the detection and defense of intrusions into IT networks
• Conducting cursory analysis of log data
• Monitoring external data sources to maintain currency of Computer Network Defense threat condition
• Identifying the cause of an incident and recognizing key elements to ask external entities
• Receiving and analyzing network alerts from various sources and determining possible causes
• Tracking and documenting Computer Network Defense incidents from initial detection through final resolution
• Working with other components within the organization to obtain and coordinate information pertaining to ongoing incidents
• Providing support during assigned shifts (Saturday & Sunday 0600-1830; plus two 8 hour shifts during the work week)

Requirements

• U.S. Citizenship
• Active TS/SCI clearance
• Ability to obtain DHS Suitability
• 2+ years of directly relevant experience in cyber incident management or cybersecurity operations
• Knowledge of incident response and handling methodologies
• Knowledge of the NCCIC National Cyber Incident Scoring System
• Knowledge of general attack stages
• Skill in recognizing and categorizing types of vulnerabilities and associated attacks
• Knowledge of basic system administration and operating system hardening techniques
• Knowledge of Computer Network Defense policies, procedures, and regulations
• Knowledge of different operational threat environments
• Knowledge of system and application security threats and vulnerabilities
• Ability to work collaboratively across physical locations

Nice-to-haves

• Knowledge of basic system administration and operating system hardening techniques
• Knowledge of Computer Network Defense policies, procedures, and regulations
• Knowledge of different operational threat environments
• Knowledge of system and application security threats and vulnerabilities