Senior Cyber Defense Incident Responder #1617422

Network Designs•Washington, DC

4d•Onsite

About The Position

Network Designs, Inc. (NDi) is a leading Federal contractor that specializes in designing, developing, and delivering information technology and network solutions for government customers. Founded in 1985, NDi's firmly defined core values have driven all aspects of the business, which have been paramount to our company's success and the establishment of an enjoyable workplace atmosphere. At NDi, we believe that our people are the cornerstone of our success, and we value collaboration, career growth, and winning ideas. The Incident Responder facilitates and coordinates with the Deputy CISO, CISO, and other leaders to provide expert technical support to the enterprise-wide cyber defense technicians to resolve cyber defense incidents. Correlates incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation to any attacks within the network. The contractor will respond to cyber incidents as necessary and act as a liaison between entities within the agency as well as internal and external stakeholders within the organization. Military Veterans Encouraged to Apply.

Requirements

U.S. Citizenship is required
Must possess an active TS clearance at the time of application, be willing and able to obtain SCI access, and pass a CI polygraph.
This position is 5/days onsite in Washington D.C.
Bachelor's degree in Computer Science, Business Administration, or related field.
At least eight (8) years of experience is required for this position.
In lieu of some experience, industry certifications can be substituted (e.g., ISC2 CISSP, EC-Council Certified Incident Handler (C|IH), EC-Council Certified Network Defender (C|ND), SANS GCIH, SANS GCIP, SANS CFCA, Carnegie Mellon University CSIH)

Responsibilities

Collects intrusion artifacts (e.g., source code, malware, trojans) and use discovered data to enable mitigation of potential cyber defense incidents within the enterprise.
Performs analysis of log files from a variety of sources to identify possible threats to network security.
Performs cyber defense incident triage, to include determining scope, urgency and potential impact, identifies the specific vulnerability, and making recommendations that enables expeditious remediation.
Performs cyber defense trend analysis and reporting.
Assists in Incident Response processes and in the enhancement of behavioral analytics including the development of Concept of Operations and Standards Operating Procedures.
Develops and maintains models for cyber threat mitigation and improves on threat modeling.
Use behavior analytics (UBA) and ensures all infrastructure components meet proper performance standards.
Coordinates and provide expert technical support to enterprise-wide cyber defense technicians to resolve cyber defense incidents.
Coordinates incident response functions.
Monitors external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat conditions and determine which security issues may have an impact on the enterprise.
Performs cyber defense trend analysis and reporting.
Performs initial, forensically sound collection of images and inspect to discern possible mitigation/remediation on enterprise systems.
Receives and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts.
Writes and publishes after-action reviews.
Writes and publishes cyber defense techniques, guidance, and reports on incident findings to appropriate constituencies.
Writes, assist, and coordinates annual FBI-wide Tabletop Exercise Training Event (TTX) in coordination with OCIO personnel.
Assists junior Incident Response Technicians in their tasks.