Cyber Case Management – Mid-level Process Assurance Analyst / Active Top Secret

Peraton•Washington, DC

2d•Onsite

About The Position

Peraton is seeking an experienced Case Management – Mid-level Process Assurance Analyst for its' Federal Strategic Cyber sector. As the nation’s risk adviser, we (CISA) help our partners strengthen their own capabilities and connect our stakeholders in industry and government to each other and to resources, analyses, and tools to help them build their own cyber, communications, and physical security and resilience, and in turn, strengthen national resilience. In this role, you will lead small projects with manageable risks and resource requirements, interact with senior customer personnel on significant matters, and coordinate activity across organizational lines. You will develop the overarching process of receiving, triaging, assigning, tracking, closing, and finalizing the record of reported incidents. You will also draft organizational documentation such as Concept of Operations, Standard Operating Procedures, and Work Instructions. Ensure tactical implementation of the incident reporting processes, staffing, and technologies. Identify opportunities to increase the efficacy of cyber incident report handling and workflows. Document challenges, coordinate across teams to identify opportunities for process improvement, and recommend solutions to ensure incident reporting apparatus success. Understand cyber, physical, and communications incident trend analysis and reporting functions. Correlate and associate potential threat activities to inform senior decision makers. Ensure timely and effective response to internal and external mission partners. Validate the appropriate incident escalation and reporting procedures. Seek to improve the quality, productivity, and sharing of information pertaining to the incident reporting life cycle. Duties may also include but are not limited to: Act as a resource for colleagues with less experience. Identify, log, categorize, perform initial triage, routing, and resolving incidents and requests. Manage the lifecycle of incident and request tickets in accordance with interface agreements. Performing customer relationship management activities with mission partners. Perform internal coordination and follow up for distributed actions. A willingness to learn new tools and technologies and take on new responsibilities as assigned.

Requirements

BS/BA with 5 years of related experience, or MS/MA with 3 years of related experience, or PhD.
An additional 4 years of experience may be considered in lieu of degree.
Demonstrated in-depth conceptual and practical knowledge in job discipline and basic knowledge of related job disciplines.
Experience leading projects or project steps within a broader project or have accountability for on-going activities or objectives.
Demonstrated experience in providing solutions to complex problems which require regular use of ingenuity and creativity.
Demonstrated ability to work independently, receiving minimal guidance.
Experience in developing formal, written guidelines or instructions with operational and technical components.
Demonstrated understanding of organizational structure and alignment to business operations.
U.S. citizenship required.
An active Top Secret Security Clearance w/ SCI eligibility.
Selected candidate must be able to obtain and maintain a favorably adjudicated DHS background investigation (EOD) for continued employment.

Nice To Haves

Security+ Certification.
ITIL Foundation Certification.
Minimum of 3 years supporting a WATCH Operations Center or Security Operations Center.
Worked within a customer service-oriented environment.
Developed business operational workflow models.
Exceptional communication skills.
Technical writing skills.
Experience in using the Remedy and ServiceNow ticketing suite.

Responsibilities

Lead small projects with manageable risks and resource requirements.
Interact with senior customer personnel on significant matters.
Coordinate activity across organizational lines.
Develop the overarching process of receiving, triaging, assigning, tracking, closing, and finalizing the record of reported incidents.
Draft organizational documentation such as Concept of Operations, Standard Operating Procedures, Work Instructions, etc..
Ensure tactical implementation of the incident reporting processes, staffing, and technologies.
Identify opportunities to increase the efficacy of cyber incident report handling and workflows.
Document challenges, coordinates across teams to identify opportunities for process improvement, and recommend solutions to ensure incident reporting apparatus success.
Understand cyber, physical, and communications incident trend analysis and reporting functions.
Correlate and associate potential threat activities to inform senior decision makers.
Ensure timely and effective response to internal and external mission partners.
Validate the appropriate incident escalation and reporting procedures.
Seek to improve the quality, productivity, and sharing of information pertaining to the incident reporting life cycle.
Act as a resource for colleagues with less experience.
Identify, log, categorize, perform initial triage, routing, and resolving incidents and requests.
Manage the lifecycle of incident and request tickets in accordance with interface agreements.
Performing customer relationship management activities with mission partners.
Perform internal coordination and follow up for distributed actions.
A willingness to learn new tools and technologies and take on new responsibilities as assigned.