Incident Response Manager with Security Clearance

Company: Booz Allen Hamilton
Location: Arlington
Posted on: March 28, 2020

Job Description:

Job Number: R0080838 Incident Response ManagerKey Role: Perform Computer Network Defense (CND) incident triage, including determining scope, urgency, and potential impact and identify the specific vulnerability and make recommendations that enable expeditious remediation. Respond to urgent IT and cyber situations to mitigate threats and correlates incident data to identify specific trends in reported incidents. Employ various, advanced response and recovery approaches as appropriate. Investigate and analyze response activities. Apply tactics, techniques, and procedures for investigative processes. Conduct root cause analysis and response coordination, providing recommendations on mitigation. Provide work leadership for junior employees. Basic Qualifications: -Experience with recognizing and categorizing types of vulnerabilities and associated attacks -Knowledge of incident response and handling methodologies, general attack stages, including foot printing and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation or covering tracks -Knowledge of basic system administration and operating system hardening techniques, CND policies, procedures, and regulations -Knowledge of different operational threat environments -Knowledge of system and application security threats and vulnerabilities -Ability to collect and organize information required for preparation of documents, training materials, guides, proposals, and reports -Ability to cover 24X7 shift work schedule, including weekends, nights, and holidays when required -Active TS/SCI clearance -HS diploma or GED and 3+ years of experience with incident management or cybersecurity operations or BA or BS degree in Incident Management, Operations Management, Cybersecurity and 1+ years of experience with incident management or cybersecurity operations Additional Qualifications: -Experience with monitoring external data sources -Experience with identifying the cause of an incident and recognizing the key elements to ask external entities when learning the background and potential infection vector of an incident -Experience with receiving and analyzing network alerts from various sources within the enterprise and determine possible causes of such alerts -Experience with tracking and documenting CND incidents from initial detection through final resolution -Experience in working with other components within the organization to obtain and coordinate information pertaining to ongoing incidents Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required. We're an EOE that empowers our people-no matter their race, color, religion, sex, gender identity, sexual orientation, national origin, disability, veteran status, or other protected characteristic-to fearlessly drive change.

Keywords: Booz Allen Hamilton, Arlington , Incident Response Manager with Security Clearance, Executive , Arlington, Virginia