Incident Manager Level 1 with Security Clearance

Company: CASTALIA SYSTEMS LLC
Location: Arlington
Posted on: January 12, 2021

Job Description:

Incident Manager Level I, MUST HAVE:Active TS/SCI clearance2+ years of directly relevant experience in cyber incident management Castalia Systems is supporting a U.S. Government customer to provide support for onsite incident response to civilian Government agencies and critical asset owners who experience cyber-attacks, providing immediate investigation and resolution. Contract personnel perform investigations to characterize of the severity of breaches, develop mitigation plans, and assist with the restoration of services. Castalia Systems is seeking a Cyber Incident Manager to support this critical customer mission. Location: Arlington, VA Responsibilities: -- Monitoring external data sources (e.g., Computer Network Defense vendor sites, Computer Emergency Response Teams [CERTs], SANS, Security Focus) to maintain currency of Computer Network Defense threat condition and determining which security issues may have an impact on the enterprise -- Identifying the cause of an incident and recognizing the key elements to ask external entities when learning the background and potential infection vector of an incident -- Receiving and analyzing network alerts from various sources within the enterprise and determining possible causes of such alerts -- Tracking and documenting Computer Network Defense (CND) incidents from initial detection through final resolution -- Working with other components within the organization to obtain and coordinate information pertaining to ongoing incidents. Required Skills: -- Must have an active TS/SCI clearance -- 2+ years of directly relevant experience in cyber incident management or cybersecurity operations -- Knowledge of incident response and handling methodologies -- Knowledge of general attack stages (e.g., foot printing and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks, etc.) -- Skill in recognizing and categorizing types of vulnerabilities and associated attacks -- Knowledge of basic system administration and operating system hardening techniques -- Knowledge of Computer Network Defense policies, procedures, and regulations -- Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored]) - Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return- oriented attacks, and malicious code) -- Must be able to work collaboratively across physical locations. Required Education: BS Incident Management, Operations Management, Cybersecurity or related degree. Two years of related work experience may be substituted for each year of degree level education. Desired Certifications: GCIH, GCFA GISP, GCED, CCFP or CISSP Desired Skills: -- Knowledge of basic system administration and operating system hardening techniques -- Knowledge of Computer Network Defense policies, procedures, and regulations -- Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored]) - Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return- oriented attacks, and malicious code) Why Castalia Systems?Castalia Systems is an 8(a) and Woman Owned Small Business (WOSB) certified company, providing a wide range of information technology and intelligence expertise to support DoD and Intelligence Community requirements. Castalia Systems values its employees and our employees love to work for Castalia! We offer a generous benefits package that includes medical, dental, and vision coverage, 401k matching with day 1 vesting, PTO and paid holidays, paid life insurance, AD&D, and long/short term disability, professional training, and many more! ADA/EEOSeniority Level Associate Industry Defense & Space Employment Type Full-time Job Functions Information Technology

Keywords: CASTALIA SYSTEMS LLC, Arlington , Incident Manager Level 1 with Security Clearance, Executive , Arlington, Virginia