LinkedIn

MID-LEVEL CYBER INCIDENT RESPONDER

LinkedIn • $90K — $120K *
Beltsville, MD 20705In-Person
Information Technology
5 - 7 years of experience
Today
Be an Early Applicant
Job Overview by Ladders

Qualifications

  • Bachelor's degree or higher
  • 5+ years in malware analysis, digital forensics, and incident handling
  • Ability to obtain relevant certifications (CSIH, CEH, GCIH, GISF, CISSP) within 3 months
  • Strong written and verbal communication skills
  • In-depth knowledge of cyber attackers and attack stages
  • Experience with network and system hardening techniques

Responsibilities

  • Perform real-time incident handling, including forensics and remediation
  • Coordinate incident response functions across the organization
  • Analyze log files for potential threats to network security
  • Detect and track cyber defense incidents from detection to resolution
  • Design incident response strategies for cloud service models
  • Monitor external sources for current cyber threats
  • Correlate data to identify vulnerabilities and recommend remediation

Benefits

  • Opportunities for professional development and certifications
  • Work with advanced cyber defense technologies
  • Collaborative environment with senior management
  • Access to cutting-edge resources in cybersecurity
  • Engagement with a knowledgeable team of cyber defense experts
Full Job Description
Location: Washington, D.C.

Clearance: Top Secret

Job Description:
  • Strong written and verbal communication skills.
  • Knowledge of cyber attackers (e.g., script kiddies, insider threat, non-nation state sponsored, and nation sponsored).
  • Knowledge of system administration, network, and operating system hardening techniques.
  • Knowledge of cyber attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).
  • Ability to apply techniques for detecting host and network-based intrusions using intrusion detection technologies.
  • Demonstrated ability to interact effectively with senior management and leadership.
  • Ability to design incident response for cloud service models.
  • Knowledge of incident categories, incident responses, and timelines for responses.
  • Knowledge of incident response and handling methodologies.
  • Knowledge of the common networking and routing protocols (e.g. TCP/IP), services (e.g., web, mail, DNS), and how they interact to provide network communications.
  • Knowledge of Application Security Risks (e.g. Open Web Application Security Project Top 10 list)
  • Coordinate incident response functions.
  • Coordinate and provide expert technical support to enterprise-wide cyber defense technicians to resolve cyber defense incidents.
  • Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation.
  • Perform analysis of log files from a variety of sources (e.g., individual host logs, network traffic logs, firewall logs, and intrusion detection system [IDS] logs) to identify possible threats to network security.
  • Perform cyber defense incident triage, to include determining scope, urgency, and potential impact, identifying the specific vulnerability, and making recommendations that enable expeditious remediation.
  • Perform cyber defense trend analysis and reporting.
  • Perform initial, forensically sound collection of images and inspect to discern possible mitigation/remediation on enterprise systems.
  • Perform real-time cyber defense incident handling (e.g., forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation) tasks to support deployable Incident Response Teams (IRTs).
  • Receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts.
  • Track and document cyber defense incidents from initial detection through final resolution.
  • Employ approved defense-in-depth principles and practices (e.g., defense-in-multiple places, layered defenses, security robustness).
  • Collect intrusion artifacts (e.g., source code, malware, Trojans) and use discovered data to enable mitigation of potential cyber defense incidents within the enterprise.
  • Coordinate with intelligence analysts to correlate threat assessment data.
  • Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on the enterprise.


Basic Qualifications- To be considered for this position, you must minimally meet the knowledge, skills, and abilities listed below:
  • Bachelor's degree or higher
  • 5+ years' experience in Malware analysis, digital forensics, data/network analysis, penetration testing, information assurance, leading incident handling
  • Must have, or be able to obtain within 3 months, one of the following certifications: CERT Certified Computer Security Incident Handler (CSIH), ECC Certified Ethical Hacker (CEH), GIAC Certified Incident Handler (GCIH), GIAC Information Security Fundamentals (GISF), or ISC2 Certified Information System Security Professional (CISSP).


Desired Skills
  • Experience identifying, capturing, containing, and reporting malware.
  • Must have, or be able to obtain within 3 months, one of the following certifications: CERT Certified Computer Security Incident Handler (CSIH), ECC Certified Ethical Hacker (CEH), GIAC Certified Incident Handler (GCIH), GIAC Information Security Fundamentals (GISF), or ISC2 Certified Information System Security Professional (CISSP).
  • Skill in preserving evidence integrity according to standard operating procedures or national standards.
  • Strong securing network communications experience.
  • Recognizing and categorizing types of vulnerabilities and associated attacks.
  • Skill in protecting a network against malware. (e.g., NIPS, anti-malware, restrict/prevent external devices, spam filters).
  • Experience performing damage assessments.
  • Skill in using security event correlation tools and design incident response for cloud service models.

About LinkedIn

LinkedIn is a social networking site designed specifically for the business community. The goal of the site is to allow registered members to establish and document networks of people they know and trust professionally. LinkedIn is the world's largest professional network on the Internet with more than 722 million members in over 200 countries and territories.
Learn more about LinkedIn
Size
16,000 employees
Industry
Media
Founded
2003
* Ladders Estimates

Similar Jobs

Ad banner background

Get Ready For Your
Next Interview

More Jobs at LinkedIn

More Information Technology Jobs

Find similar MID-LEVEL CYBER INCIDENT RESPONDER jobs:

NationwideBeltsville, MD