Tier 2 Deputy IR Lead

Base One Technologies - Ashburn, VA

Full-time - Mid Level

Ashburn, VA

Professional, Scientific, and Technical Services

About the position

The Tier 2 Deputy IR Lead at Base One Technologies is responsible for leading incident response activities and mentoring junior SOC staff. This role involves utilizing advanced technologies for forensic analysis, malware investigation, and incident detection to enhance the organization's cybersecurity posture. The position requires strong problem-solving skills and the ability to communicate findings effectively to stakeholders.

Responsibilities

• Utilize state of the art technologies such as host forensics tools, Endpoint Detection & Response tools, log analysis, and network forensics to perform investigative activities.
• Conduct malware analysis, host and network forensics, log analysis, and triage in support of incident response.
• Recognize attacker and APT activity, tactics, and procedures as indicators of compromise (IOCs).
• Develop and build security content, scripts, tools, or methods to enhance incident investigation processes.
• Lead Incident Response activities and mentor junior SOC staff.
• Work with key stakeholders to implement remediation plans in response to incidents.
• Investigate and identify root cause findings and communicate findings to stakeholders.

Requirements

• Must be a US citizen, no clearance required, prefer Secret Clearance with the ability to obtain TS/SCI.
• Bachelor's degree in Science or Engineering Field, IT, Cybersecurity, or related field.
• 3+ years of experience in incident detection and response, remediation malware analysis, or computer forensics.
• Prior relevant experience in incident detection and response, malware analysis, or computer forensics.
• Ability to script in one or more of the following languages: Python, Bash, Visual Basic, or PowerShell.

Nice-to-haves

• Experience in Federal Government, DOD or Law Enforcement in CND, IR or SOC role
• Cyber Kill Chain Knowledge