Tier 3 Incident Response Senior Analyst

Sentar Inc•Quantico, VA

44d•Onsite

About The Position

Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the small business team where you can build, innovate, and secure your career. Sentar is seeking a Tier 3 Incident Response Senior Analyst in Quantico, VA! Role Description: Sentar is hiring a Tier 3 Incident Response Senior Analyst who will be responsible for incident response activities throughout the Enterprise. This position will support an active government contract in Quantico, Virginia, providing defensive cyberspace operations and Cyber Security Service Provider (CSSP) functions. Additionally, this position will support the government's mission to deny, disrupt, and degrade adversaries abilities and attempts to disrupt, exploit and attack the information technology (IT) services provided to network users. The selected applicant will perform a variety of activities including but not limited to: -Collect and analyze network and host artifacts from a variety of sources to include logs, system images and packet captures to characterize activity, determine root cause, operational impact, and to enable rapid remediation and mitigation of cyber threats within the Enterprise Network through the investigation process. Manage and document cyber defense incidents from initial detection through final resolution. Perform quality assurance on routine cyber incident reporting to ensure accuracy and compliance to policies and procedures. Make recommendations for alert tuning and creation of new detection use cases from information gathered during response to new techniques observed on the network. Mentor junior analysts and guide them through the investigation process as necessary. Develop and refine curriculum for the supported customer's Incident Response Course. Assist in instructing an Incident Response Course. Conduct forensic analysis of device timeline, device memory, file systems, and pcap (Digital Forensics & Incident Response - DRIR) Schedule: On-site (no telework), M-F 8 X 5, on-call after hours and weekends approximately once every four weeks (occasional after hours phone call and possible recall to site recall to site occurs very rarely). In extremis for priority mission requirements, any and all Tier 3 Incident Responders could be recalled a rare occasion that we have not experienced since this contract began.

Requirements

Clearance Level: TS/SCI eligibility
Certifications: IAT Level II certification CSSP Incident Responder certification
Education/Experience: Associate's degree in a Computer Science, Information Technology, Information Systems, or Computer Engineering field; OR five (5) years of relatable work experience.

Responsibilities

Collect and analyze network and host artifacts from a variety of sources to include logs, system images and packet captures to characterize activity, determine root cause, operational impact, and to enable rapid remediation and mitigation of cyber threats within the Enterprise Network through the investigation process.
Manage and document cyber defense incidents from initial detection through final resolution.
Perform quality assurance on routine cyber incident reporting to ensure accuracy and compliance to policies and procedures.
Make recommendations for alert tuning and creation of new detection use cases from information gathered during response to new techniques observed on the network.
Mentor junior analysts and guide them through the investigation process as necessary.
Develop and refine curriculum for the supported customer's Incident Response Course.
Assist in instructing an Incident Response Course.
Conduct forensic analysis of device timeline, device memory, file systems, and pcap (Digital Forensics & Incident Response - DRIR)

Benefits

Voluntary Medical, Dental, Vision, with Health Savings or Flexible Spending Plan options
Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options
Group Term Life, Short-Term and Long-Term Disability is provided by Sentar to all qualifying employees
Generous 401(k) match
Competitive PTO plan that graduates quickly with years of service
Other leave programs; holiday schedule along with bereavement, maternity, jury and military duty
Mental health awareness programs
Tuition reimbursement
Professional development reimbursement
Recognition and Awards programs