Incident Manager with Security Clearance

3 weeks ago


Arlington, United States Arsiem Corporation Full time
Incident Manager - III Seeking a Cybersecurity Vulnerability Analyst to support this critical customer mission support a U.S. Government customer to provide cybersecurity vulnerability analysis support to reduce the prevalence and impact of vulnerabilities and exploitable conditions across Federal Civilian Executive Branch (FCEB) entities and Critical Infrastructure Key Resources (CIKR). The Cybersecurity Vulnerability Analyst utilizes cybersecurity best practices, risk management techniques, critical thinking, and strong analytical skills to analyze information from multiple sources, synthesize that information, and provide expert analysis to senior customer stakeholders. Responsibilities:
• Utilize creativity and divergent thinking to assess and explain the impact of cybersecurity vulnerabilities on FCEB and CIKR security postures
• Conduct prevalence and sector analysis of vulnerabilities with Attack Surface Management tools
• Review vulnerability reporting to identify potential risks and impacts CIKR and FCEB entities
• Maintain awareness of technical capabilities of Vulnerability Management (VM) Subdivision operational components
• Evaluate technical requirements of VM operational components and recommend paths forward
• Understand and articulate the impact of vulnerabilities to organizations
• Coordinate with VM analysts and leadership to synchronize VM operational activities
• Coordinate with broader Cybersecurity Division (CSD) analysts and leadership to understand CSD operational priorities and activities
• Willingness, ability, and flexibility to assist the government to standup this new mission operations area within VM
• Demonstrated ability to contribute to developing Standard Operating Procedures and Work Instructions as required
• Demonstrated ability to contribute to weekly operation summaries, intelligence analysis summaries, and other cyber intelligence reports Required Skills:
• U.S. Citizenship
• Must have an active TS/SCI clearance
• Must be able to obtain DHS Suitability
• 5+ years of directly relevant experience
• Experience as a hands-on cybersecurity analyst (i.e. SOC Analyst or Penetration Tester) is required
• Experience with the analysis and characterization of cyber attacks
• Skilled in identifying different classes of attacks and attack stages
• Knowledge of system and application security threats and vulnerabilities
• Knowledge of basic networking protocols, including TCP/IP, UDP, HTTP/HTTPS, SSH, and DNS, and open security standards and projects, including OWASP
• Knowledge of CVSS and KEV scoring methodology
• Knowledge of general attack stages (e.g., foot printing and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks, etc.)
• Knowledge of VM scanning, Web Application scanning, and red team processes
• Experience recognizing and categorizing types of vulnerabilities and associated attacks
• Knowledge of Computer Network Defense policies, procedures, and regulations
• Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored])
• Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return-oriented attacks, and malicious code)
• Experience in developing and delivering technical briefings
• Must be able to work collaboratively across physical and virtual locations Desired Skills:
• Understanding of OT/ICS/SCADA technologies and associated vulnerabilities
• Experience with conducting all-source research
• Understanding of MITRE Adversary Tactics, Techniques and Common Knowledge (ATT&CK)
• Experience with:
o SharePoint
o ServiceNow
o Palo Alto Networks Cortex Xpanse Required Experience Education:
BS Computer Science, Computer Engineering, Computer Information Systems, Cybersecurity, or related degree, or 7+ years experience in cyber incident management experience or cybersecurity experience with a High school diploma. Desired Certifications:
• CompTIA Security+, CEH, CISSP, CISM, CISA, CCSP, CIPP, CPT, CCSS

  • Arlington, United States Base One Technologies Full time

    Responsibilities:• Correlating incident data to identify specific trends in reported incidents• Recommending defense in depth principles and practices (i.e. Defense in Multiple Places, layered defenses, security robustness, etc.)• Performing Computer Network Defense incident triage to include determining scope, urgency, and potential impact Researching...


  • Arlington, United States Base One Technologies Full time

    Responsibilities:- Correlating incident data to identify specific trends in reported incidents- Recommending defense in depth principles and practices (i.e. Defense in Multiple Places, layered defenses, security robustness, etc.)- Performing Computer Network Defense incident triage to include determining scope, urgency, and potential impact- Researching and...


  • Arlington, United States Base One Technologies Full time

    Incident Manager - II Responsibilities:- Researching and compiling known resolution steps or workarounds to enable mitigation of potential Computer Network Defense incidents within the enterprise- Applying knowledge of the tactics, techniques, and procedures of various criminal, insider, hacktivist, and nation state threat actors to identify and validate...


  • Arlington, United States Base One Technologies Full time

    Responsibilities:• Correlating incident data to identify specific trends in reported incidents• Recommending defense in depth principles and practices (i.e. Defense in Multiple Places, layered defenses, security robustness, etc.) • Performing Computer Network Defense incident triage to include determining scope, urgency, and potential impact•...


  • Arlington, United States Base One Technologies Full time

    Our Arlington VA based client is looking for Incident Manager III. If you are qualified for this position, please email your updated resume in word format to Responsibilities:- Correlating incident data to identify specific trends in reported incidents- Recommending defense in depth principles and practices (i.e. Defense in Multiple Places, layered...


  • Arlington, United States Base One Technologies Full time

    Our Arlington VA based client is looking for Incident Managers. If you are qualified for this position, please email your updated resume in word format to Incident Manager Responsibilities: • Correlating incident data to identify specific trends in reported incidents • Recommending defense in depth principles and practices (i.e. Defense in Multiple...


  • Arlington, United States Base One Technologies Full time

    Our Arlington VA based client is looking for Incident Managers. If you are qualified for this position, please email your updated resume in word format to Responsibilities: • Correlating incident data to identify specific trends in reported incidents • Recommending defense in depth principles and practices (i.e. Defense in Multiple Places, layered...

  • Incident Manager

    3 weeks ago


    Arlington, United States Farfield Systems, Inc Full time

    Farfield will assist the Federal staff within the Cybersecurity and Infrastructure Protection Agency (CISA) Hunt and Incident Response Team (HIRT), and National Cybersecurity and Assessment and Technical Services (NCATS) branches, with a broad set of support functions.The Hunt and Incident Response Team is DHS's front line when responding to cyber incidents...


  • Arlington, United States Base One Technologies Full time

    Work Location: Arlington VA Cyber Incident Manager Responsibilities:Researching and compiling known resolution steps or workarounds to enable mitigation of potential Computer Network Defense incidents within the enterpriseApplying knowledge of the tactics, techniques, and procedures of various criminal, insider, hacktivist, and nation state threat actors to...


  • Arlington, United States Base One Technologies Full time

    Responsibilities:• Correlating incident data to identify specific trends in reported incidents• Recommending defense in depth principles and practices (i.e. Defense in Multiple Places, layered defenses, security robustness, etc.)• Performing Computer Network Defense incident triage to include determining scope, urgency, and potential impact•...

  • Incident Manager

    3 weeks ago


    Arlington, United States Base One Technologies Full time

    Responsibilities:• Correlating incident data to identify specific trends in reported incidents• Recommending defense in depth principles and practices (i.e. Defense in Multiple Places, layered defenses, security robustness, etc.)• Performing Computer Network Defense incident triage to include determining scope, urgency, and potential impact•...


  • Arlington, United States Base One Technologies Full time

    Our client is supporting a U.S. Government customer to provide support for onsite incident response to civilian Government agencies and critical asset owners who experience cyber-attacks, providing immediate investigation and resolution. Contract personnel perform investigations to characterize the severity of breaches, develop mitigation plans, and assist...


  • Arlington, United States Base One Technologies Full time

    Responsibilities:- Researching and compiling known resolution steps or workarounds to enable mitigation of potential Computer Network Defense incidents within the enterprise- Applying knowledge of the tactics, techniques, and procedures of various criminal, insider, hacktivist, and nation state threat actors to identify and validate threats- Applying...


  • Arlington, United States Base One Technologies Full time

    Responsibilities:- Researching and compiling known resolution steps or workarounds to enable mitigation of potential Computer Network Defense incidents within the enterprise- Applying knowledge of the tactics, techniques, and procedures of various criminal, insider, hacktivist, and nation state threat actors to identify and validate threats- Applying...

  • Incident Manager

    3 weeks ago


    Arlington, United States Base One Technologies Full time

    Responsibilities:• Researching and compiling known resolution steps or workarounds to enable mitigation of potential Computer Network Defense incidents within the enterprise• Applying knowledge of the tactics, techniques, and procedures of various criminal, insider, hacktivist, and nation state threat actors to identify and validate threats• Applying...

  • Incident Manager

    3 weeks ago


    Arlington, United States Base One Technologies Full time

    Responsibilities:Researching and compiling known resolution steps or workarounds to enable mitigation of potential Computer Network Defense incidents within the enterpriseApplying knowledge of the tactics, techniques, and procedures of various criminal, insider, hacktivist, and nation state threat actors to identify and validate threatsApplying cybersecurity...


  • Arlington, United States Base One Technologies Full time

    Our Arlington VA based client is looking for Incident Managers. If you are qualified for this position, please email your updated resume in word format to Responsibilities: • Researching and compiling known resolution steps or workarounds to enable mitigation of potential Computer Network Defense incidents within the enterprise • Applying knowledge of...

  • Incident Manager

    3 weeks ago


    Arlington, United States Base One Technologies Full time

    Responsibilities:• Researching and compiling known resolution steps or workarounds to enable mitigation of potential Computer Network Defense incidents within the enterprise• Applying knowledge of the tactics, techniques, and procedures of various criminal, insider, hacktivist, and nation state threat actors to identify and validate threats• Applying...


  • Arlington, United States MicroSys LLC Full time

    PROGRAM DESCRIPTION:The DHS’s Hunt and Incident Response Team (HIRT) secures the Nation’s cyber and communications infrastructure. HIRT provides DHS’s front line response for cyber incidents and proactively hunting for malicious cyber activity. MicroSys performs HIRT investigations to develop a preliminary diagnosis of the severity of breaches....


  • Arlington, United States Base One Technologies Full time

    Our Arlington VA based client is Incident Manager. If you are qualified for this position, please email your updated resume in word format to Responsibilities:• Correlating incident data to identify specific trends in reported incidents• Recommending defense in depth principles and practices (i.e. Defense in Multiple Places, layered defenses, security...