Incident Response Lead/Advisor

AnaVation•Reston, VA

1d•Onsite

About The Position

AnaVation is seeking an experienced cyber professional to join our team and support our mission critical customer in Reston, VA. As the Incident Response Lead/Advisor, you will advise/mentor/coach a team of cyber security professionals on best practices regarding incident responses on a variety of networks, platforms, and tools. Your previous experience working collaboratively across cross-functional teams/staff, at multiple levels, to deliver short-term, medium-term, and long-term response efforts would drive customer and program success.

Requirements

U.S. Citizen, TS/SCI w/CI Poly clearance
Bachelor's degree in a relevant field
DoD 8570 IAT Level II (CySA+) within 30 days of contract start
8 years of experience (or 6 years of experience with a relevant Masterâ€™s Degree) with identifying, analyzing, and responding to security incidents such as cyberattacks, data breaches, and system vulnerabilities.
Experience monitoring and analyzing security logs and network traffic to detect anomalies
Experience executing IR playbooks and conducting digital forensics
Experience collaborating with IT and security teams to mitigate threats and prevent recurrence
Experience advising on security policies, risk management, and compliance
Knowledge of cyber adversary tactics, techniques, and procedures
Knowledge of analysis of advanced intrusions across a complex global network and basic cyber-security forensics procedures.
Understanding of how to read and interpret malware analysis reports.
Strong oral and written communications skills and ability to interact effectively with technical and non-technical audiences.
Excellent technical editing of formal report production and related skills.

Nice To Haves

CEH (Certified Ethical Hacker)
GCIH (GIAC Certified Incident Handler)
GCIA (GIAC Certified Intrusion Analyst)
Cyber Mission Force analyst or operator experience
Management experience
Experience with DoD cybersecurity operations
Experience with classified system information assurance

Responsibilities

Advise/mentor/coach a team of cyber security professionals on best practices regarding incident responses on a variety of networks, platforms, and tools.
Work collaboratively across cross-functional teams/staff, at multiple levels, to deliver short-term, medium-term, and long-term response efforts.
Identify, analyze, and respond to security incidents such as cyberattacks, data breaches, and system vulnerabilities.
Monitor and analyze security logs and network traffic to detect anomalies.
Execute IR playbooks and conduct digital forensics.
Collaborate with IT and security teams to mitigate threats and prevent recurrence.
Advise on security policies, risk management, and compliance.
Ensure 24x7 coverage through rotational shifts.
Analyze advanced intrusions across a complex global network.
Perform basic cyber-security forensics procedures.
Read and interpret malware analysis reports.
Communicate effectively with technical and non-technical audiences.
Provide technical editing of formal report production.