Cyber Incident Manager - 1 year of experience
On-site · Arlington, Virginia, United States
Job Summary
Cyber Incident Manager to support a U.S. Government on-site incident response mission. Responsibilities include correlating incident data to identify trends, recommending defense-in-depth strategies, performing CND incident triage to determine scope and urgency, researching known resolution steps to mitigate incidents, applying cybersecurity concepts to detect and defend intrusions, monitoring external data sources to maintain threat awareness, identifying root causes and infection vectors, analyzing network alerts, tracking incidents from detection through resolution, and providing support during assigned shifts. Required skills include U.S. Citizenship, active TS/SCI clearance, ability to obtain DHS suitability, 1+ years in cyber incident management or cybersecurity operations, knowledge of incident response methodologies, familiarity with NIST 800-62 and FISMA, NCCIC scoring system, understanding of attack stages and vulnerabilities, basic system administration and hardening techniques, and knowledge of various threat environments. Desired education includes a BS in related fields and certifications such as GCIH, GCFA, GCED, CISSP.
Required Qualifications
- U.S. Citizenship
- Active TS/SCI clearance
- Ability to obtain DHS Suitability
- 1+ years of directly relevant experience in cyber incident management or cybersecurity operations
- Knowledge of incident response and handling methodologies
- Knowledge of NIST 800-62 (latest revision) and FISMA standards as they pertain to incident reporting
- Knowledge of NCCIC National Cyber Incident Scoring System for triage prioritization
- Knowledge of general attack stages and vulnerabilities
- Knowledge of system administration and operating system hardening techniques
- Knowledge of Computer Network Defense policies, procedures, and regulations
- Knowledge of different operational threat environments
- Knowledge of system and application security threats and vulnerabilities
- BS in Incident Management, Operations Management, Cybersecurity or related field
- Desired certifications: GCIH, GCFA, GCED, CISSP
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.