Senior Cybersecurity Incident Response Engineer

Interactive Process Technology LLC • Radford, VA

3d • Onsite

About The Position

The Senior Cybersecurity Incident Response Engineer will manage enterprise security information and event management (SIEM) systems, including deployment, installation, infrastructure management, and event monitoring under applicable DoD log data policies. The role supports security monitoring, incident response, auditing, and system security compliance, working with cybersecurity service providers and other stakeholders.

Requirements

• Cybersecurity certification such as CISSP, ISSEP, Security+, CEH, or equivalent.
• Active security clearance.
• 10 or more years of experience in cybersecurity and incident response or related areas.
• Extensive experience managing SIEM systems, including ensuring appropriate data is sent to the SIEM.
• Skill in building and managing SIEM dashboards that display security events.
• Strong ability to monitor and investigate security events and anomalies.
• Experience defining reporting requirements for audits and security controls.
• Knowledge of PKI and SSL/TLS certificate management.
• Familiarity with DoD web application security standards and best practices.
• Ability to review and respond to cyber tasking orders.
• Experience working with cybersecurity service providers on audit logs and incident response.
• Experience conducting software assurance reviews to validate application audit logs.
• Ability to review information system design plans for security compliance.

Nice To Haves

• Bachelor's degree in computer science or equivalent experience.
• Familiarity with DoD enterprise monitoring tools and practices.
• Strong analytical, problem-solving, communication, and coordination skills.
• Incident response experience.
• Knowledge of engineering change proposals and configuration management.
• Understanding of continuity of operations (COOP) and communication plans.
• Ability to work well on a team and with many stakeholders.

Responsibilities

• Build SIEM dashboards that clearly display security events to help identify anomalies and threats in near real time.
• Monitor SIEM dashboards, investigate events, and escalate when needed.
• Define reporting requirements that support audits and security controls.
• Provide PKI support, including managing SSL/TLS certificates.
• Track DoD web application security standards and newly disclosed vulnerabilities.
• Review cyber tasking orders, determine whether and how they apply, and coordinate required changes.
• Work with cybersecurity service providers on audit logging and incident response.
• Participate in software assurance reviews and assess system designs for security compliance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior