Incident Response Specialist

AnaVation•Reston, VA

2d•$88,661 - $196,000•Onsite

About The Position

AnaVation is seeking an experienced cyber professional to join our team and support our mission critical customer in Reston, VA. As the Incident Response Lead/Advisor, you will advise a team of cyber security professionals on best practices regarding incident responses on a variety of networks, platforms, and tools. Your previous experience working collaboratively across cross-functional teams/staff, at multiple levels, to deliver response efforts would drive customer and program success.

Requirements

U.S. Citizen, TS/SCI w/CI Poly clearance.
Bachelor's degree in a relevant field.
DoD 8570 IAT Level II certification within 30 days of contract start (Sec+, CySA+, etc.).
4 years of experience (or 2 years of experience with a relevant Master’s Degree) with identifying, analyzing, and responding to security incidents such as cyberattacks, data breaches, and system vulnerabilities.
Experience building and executing IR playbooks.
Experience collaborating with IT and security teams to mitigate threats and prevent recurrence.
Experience advising on security policies, risk management, and compliance.
Knowledge of cyber adversary tactics, techniques, and procedures.
Knowledge of analysis of advanced intrusions across a complex global network.
Knowledge of basic cyber-security forensics procedures.
Strong oral and written communications skills.
Ability to interact effectively with technical and non-technical audiences.
Excellent technical editing of formal report production and related skills.

Nice To Haves

CEH (Certified Ethical Hacker)
GCIH (GIAC Certified Incident Handler)
GCIA (GIAC Certified Intrusion Analyst)
Cyber Mission Force analyst or operator experience
Management experience
Experience with DoD or IC cybersecurity operations
Experience with classified system information assurance

Responsibilities

Advise a team of cyber security professionals on best practices regarding incident responses on a variety of networks, platforms, and tools.
Work collaboratively across cross-functional teams/staff, at multiple levels, to deliver response efforts.
Identify, analyze, and respond to security incidents such as cyberattacks, data breaches, and system vulnerabilities.
Build and execute IR playbooks.
Collaborate with IT and security teams to mitigate threats and prevent recurrence.
Advise on security policies, risk management, and compliance.
Analyze advanced intrusions across a complex global network.
Produce formal reports and related technical documentation.