Cyber Security Operations Incident Responder/Swing- Shift Lead Analyst
$120,000–$170,000 year
On-siteFort Belvoir, Virginia, United States
Job Summary
Collect and analyze network artifacts, logs, and packet captures to characterize cyber threats and enable rapid remediation. Perform incident triage to determine scope, urgency, and impact, then execute forensic collections, intrusion correlation, and direct system remediation. Manage and document incidents from detection through resolution while providing technical guidance to Tier I analysts and overseeing QA alert closures. Develop and maintain detection use cases based on MITRE ATT&CK frameworks, tracking metrics for false positives and execution times. Create and refine signatures, rules, and filters for network defense systems, and automate detection execution to reduce false-positive rates below 10%. Validate plays by emulating adversary tactics and demonstrate effectiveness against Red Team activity. Serve as the alternate technical lead when needed, disseminating taskings to the team under government supervision.
Required Qualifications
- Active Top-Secret Clearance
- SCI eligibility
- DOD 8570 IAT II certification
- CSSP Analyst certification
- BS degree
- 5-7 years of experience
- MS degree
- 3-5 years of experience
- PhD
- 0-2 years of experience
- Working knowledge of DoDI 8530.01
- Proficiency with Splunk SIEM or similar tools
- U.S. Citizenship
- Ability to obtain a security clearance
- Must be able to work Swing Shift: 1400-2200 Thursday - Sunday
- Must be available for evenings and weekends
- Must be willing to travel 10%
- Must be able to lift up to 10 pounds
- Must be able to lift up to 25 pounds
- Must be able to lift up to 50 pounds
- Must be able to use hands to handle, feel, touch
- Must be able to reach with hands and arms
- Must be able to talk and hear
- Must be able to stand
- Must be able to walk
- Must be able to sit
- Must be able to climb or balance
- Must be able to stoop, kneel, crouch, or crawl
- Must have close vision
- Must have distance vision
- Must have peripheral vision
- Must have depth perception
- Must be able to adjust focus
Desired Qualifications
- Experience with cyber security architecture principles that achieve cybersecurity framework goals
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.