Incident Manager III

Base One Technologies - Arlington, VA

Full-time - Mid Level

Arlington, VA

Professional, Scientific, and Technical Services

About the position

The Incident Manager III role at Base One Technologies involves providing critical support for incident response to U.S. Government agencies facing cyber-attacks. The position requires immediate investigation and resolution of incidents, ensuring the security and integrity of IT networks. The role is essential in characterizing breaches, developing mitigation plans, and restoring services, while also monitoring and analyzing incident data to enhance cybersecurity measures.

Responsibilities

• Correlating incident data to identify specific trends in reported incidents
• Recommending defense in depth principles and practices
• Performing Computer Network Defense incident triage to determine scope, urgency, and potential impact
• Researching and compiling known resolution steps or workarounds for mitigation of potential incidents
• Applying cybersecurity concepts to detect and defend against intrusions
• Monitoring external data sources to maintain currency of Computer Network Defense threat conditions
• Receiving and analyzing network alerts to determine possible causes
• Tracking and documenting Computer Network Defense incidents from detection to resolution
• Providing support during assigned shifts (Monday through Friday, normal business hours)

Requirements

• U.S. Citizenship with an active TS/SCI clearance
• Ability to obtain DHS Suitability
• 5+ years of directly relevant experience in cyber incident management or cybersecurity operations
• Knowledge of incident response and handling methodologies
• Familiarity with NIST 800-62 and FISMA standards
• Knowledge of the NCCIC National Cyber Incident Scoring System
• Understanding of general attack stages and vulnerability categorization
• Knowledge of system administration and operating system hardening techniques
• Familiarity with Computer Network Defense policies and regulations
• Understanding of different operational threat environments
• Knowledge of system and application security threats and vulnerabilities

Nice-to-haves

• Knowledge of different operational threat environments
• Knowledge of system and application security threats and vulnerabilities