Cyber Security Engineering Specialist III

Coordinate and implement cyber security incident response tasks, including containment measures, IP/domain blocks, and user account disabling on Government direction. Perform advanced investigation and triage by collaborating with Security and Installations Directorate, counterintelligence personnel, and law enforcement. Categorize incidents, build timelines, and document actions in authorized ticketing systems to enable systematic reconstruction. Develop custom scripts, tools, and capabilities to collect and analyze data, while conducting digital media analysis on host, server, and network artifacts. Generate and update reports in Joint Incident Management System and Incident Case Management System, providing adversary attribution and malware analysis. Execute Defensive Cyberspace Operations-Internal Defensive Measures and conduct Quality Control reviews of closed tickets.