Incident Response Analyst with Security Clearance

Company: Moseley Technical Services, Inc.
Location: Arlington
Posted on: March 28, 2020

Job Description:

Check out this new opportunity! Incident Response Analyst Job ID # 2020-10988 Contract Opportunity Location: Arlington, VA Industry: Defense Clearance Requirement: TS/SCI Minimum Education: High School Diploma /GED Minimum Experience: 8 years What You'll Do: * Collects and analyzes host based and network-based data in support of incident response investigations.* Interprets, analyzes and reports on events and anomalous activity discovered through incident response investigations.* Leverages tools including Tanium, Splunk, Jupyter/Zeppelin Notebook, Sysmon, and Bro as part of duties performing cyber incident response analysis.* Supports incident response engagements, and partners with other incident response teams in maintaining an understanding of threats, vulnerabilities, and exploits that could impact client networks and assets* Performs real-time and proactive analysis on various data sources, such as anti-virus logs, firewall logs, IDS & IPS data, event logs, and other host-based and network-based artifacts.* Utilizes data analytics tools including Splunk to make sense of machine data in performing responsibilities.* Correlates and analyzes data between disparate sources to assess threat actor techniques, tactics, and procedures.* Supports the incident manager in focusing and providing response, containment, investigation, and remediation efforts.* May be required to coordinate with external organizations, authorities, and senior level leadership. What You'll Need: * Active TS/SCI clearance. Must be willing and able to obtain a polygraph within a reasonable amount of time after hire.* Familiar with network analytics including Netflow/PCAP analysis.* Understanding of cyber forensics concepts including malware, hunt, etc.* Understanding of how both Windows and Linux systems are compromised.* Experience using Splunk for system data analytics and monitoring strongly preferred.* Experience performing cyber forensics, malware analysis, cyber hunt, etc. strongly preferred.* A professional certification such as CEH, OSCP, OSCE, GCFA, GNFA, GREM, or GCIH is highly desirable. *U.S. Citizenship is required by law, regulation, executive order, or government contract. Education & Experience: * High school diploma / GED combined with 8+ years of relevant technical experience. What to Expect: * Applicants selected for employment will be required to pass a pre-employment drug screening and background investigation which may include education, criminal and work history verifications.* Accepted applicants will have the opportunity to be eligible for benefits, including medical and supplemental insurance and a 401K. Appreciation and gratitude for employees is a hallmark of organizations with low turnover. Moseley Technical Services, Inc. is an AA/EEO/Veterans/Disabled Employer. Resources For questions about benefits visit: http://www.moseleytechnical.com/job-seekers/ For more information about Moseley visit: http://www.moseleytechnical.com/about-us/ Still have questions? Reach out to Josh 256-880-0446 Ext. 307 ()

Keywords: Moseley Technical Services, Inc., Arlington , Incident Response Analyst with Security Clearance, Professions , Arlington, Virginia