CSOS III/Tier 3 with Security Clearance

3 weeks ago

St Louis MO United States Strategic ASI Full time
CSOS Analyst Tier 3 Minimum Clearance Required to Start: TS/SCI
Employee Type: Regular
Percentage of Travel Required: None
Type of Travel: None Position Overview: Candidate will provide CSOC Tier 3 services, which is 24x7x365 coordination, execution, and implementation of all actions required for the containment, eradication, and recovery measures for events and incidents
CSOC Tier 3 services includes malware and implant analysis, and forensic artifact handling and analysis
When a CIRT is stood up, all contractors in support of CSOC Tier 3 services will be under the direct control of, and take direction from, the Government CIRT Commander
While not in a period of incident response, the Contractor shall conduct continuous exercises and dry runs to improve response outcomes in the event of a cyber-incident
All Contractor personnel performing CSOC Tier 3 services shall have or obtain, within six months of start, a certification that is compliant with DoDD 8140.01 and DoD 8570.01-M IAT Level III and CSSP Incident Responder
Job Duties:
Job Requirements: Preferred Qualifications:
* Coordinate with CSOC Tier 1 and 2 services to remediate all discrepancies and provide recommendations to prevent reoccurrence.
* Performs malware analysis and signature development;
* Provides adversary attribution;
* Develops and identifies indicators of compromise to send to Cybersecurity stakeholders and other Contract Services;
* Performs digital media analysis on host, server, and network data as required to analyze and respond to an incident, to include but not limited to volatile and non-volatile memory and/or system artifact collection and analysis;
* Develops, maintains, sustains, and when properly authorized by the Government executes custom scripts, tools, and capabilities to collect and analyze data, and to respond to incidents/events;
* Develops and when approved by the Government generates and updates reports in the Joint Incident Management System (JIMS), Incident Case Management System (ICMS), and/or other authorized reporting systems as directed;
* Documents actions taken and analysis in the authorized ticketing system to a level of detail where the actions taken and analysis are capable of being systematically reconstructed.
* Builds timelines, documents, briefings, and other products as required to inform stakeholders of incident response actions, analysis, and the impact of both adversary activity and blue force response actions.
* Coordinates with other contracts, organizations, activities, and services to ensure NGA recovers from an incident/event;
* Coordinates with other contracts, organizations, activities, and other services as appropriate to de-conflict blue / red team activity with open incidents/events;
* Coordinates with other contracts, organizations, activities, and other services as appropriate to ensure incidents are properly reported, contained, and eradicated;
* Categorizes incidents and events;
* Collaborates with appropriate authorities in the production of security incident reports;
* Coordinates with Security and Installations Directorate (SI) Office of Counterintelligence (SIC), Insider Threat Office (SIII), in addition to other law enforcement and counter intelligence personnel as required to perform advanced investigation and triage of incidents;
* Coordinate and implement tasks, performing analysis, and building/documenting response activities required during cyber security incident response, to include but not limited to actions such as implementing containment measures, IP blocks, domain blocks, and disabling user accounts on direction of the Government.
* Active TS/SCI, ability to obtain a polygraph
* DoDD 8140.01 and DoD 8570.01-M IAT Level II and CSSP Incident Responder
Provides input to and coordinates with all applicable stakeholders to develop and deliver the daily CSOC Significant Activity Report, the daily CSOC Operations Update, and the Weekly CSOC Status Report;
* Serve as C-IRT members as required and serve under the direct control of, and take direction from, the Government C-IRT Commander;
* Develop and coordinate courses of action with various Government and contract stakeholders, and when properly authorized by the Government, execute Defensive Cyberspace Operations-Internal Defensive Measures on behalf of the NGA on NGA networks and systems;
* Performs digital media analysis and malware reverse engineering on host, server, and network data as required to analyze and respond to an incident, to include but not limited to volatile and non-volatile memory and/or system artifact collection and analysis.
* When properly authorized by the Government, execute custom scripts, tools, and capabilities to collect and analyze data, and to respond to incidents/events;
* Develops, documents, and provides to the Government incident investigation reports which include sufficient information to document the entire lifecycle of the incident and the response, including but not limited to adversary and friendly forces activity, host and network analysis, timelines, and recommendations for corrective actions, recommendations for new Tactics, Techniques, and Procedures (TTP) and other recommendations as appropriate, within 30 days of C-IRT stand-down;
* Conduct Quality Control reviews of a percentage closed CSOC Tier 2 tickets each week to ensure proper analysis, categorization, documentation, and notification
* Bachelors Degree and or 6 years' experience in Cyber Security (CSOS)
* IAT III
* Masters degree

  • CSOS III/Tier 3 with Security Clearance

    4 weeks ago

    Saint Louis, United States Strategic ASI Full time

    CSOS Analyst Tier 3 Minimum Clearance Required to Start: TS/SCIEmployee Type: RegularPercentage of Travel Required: NoneType of Travel: None Position Overview: Candidate will provide CSOC Tier 3 services, which is 24x7x365 coordination, execution, and implementation of all actions required for the containment, eradication, and recovery measures for events...

  • SOC Analyst

    15 hours ago

    St Louis, United States GuidePoint Security Full time

    GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation's top organizations, such as Fortune 500 companies and U.S. government agencies,...

  • Network Security Engineer

    16 hours ago

    St Louis, United States GuidePoint Security Full time

    GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation's top organizations, such as Fortune 500 companies and U.S. government agencies,...

  • Tier II Helpdesk Technician

    1 week ago

    St Louis, United States Golden Technology Full time

    Hiring a Tier II Helpdesk Technician!Our client is looking for a Tier II Helpdesk position for a contract position. This position will provide Tier 2 duties including Desktop Support (Helpdesk calls related to logging into laptops, Zoom meetings, headset troubleshooting), Computer Hardware (Imaging computers, packaging and shipping computers),...

  • Tier II Helpdesk Technician

    1 week ago

    St Louis, United States Golden Technology Full time

    Hiring a Tier II Helpdesk Technician!Our client is looking for a Tier II Helpdesk position for a contract position. This position will provide Tier 2 duties including Desktop Support (Helpdesk calls related to logging into laptops, Zoom meetings, headset troubleshooting), Computer Hardware (Imaging computers, packaging and shipping computers),...

  • Cyber Security Operations Specialist II

    3 weeks ago

    Saint Louis, United States RISA Full time

    Job DescriptionJob DescriptionAbout RISAIn this time of rapid change, as technologies expand at lightning speed, RISA seeks to remain at the forefront - applying them in unique ways to address our customers’ challenges and providing our employees with engaging career opportunities. We seek professionals excited by a challenge and focused on assisting our...

  • Systems Administrator

    6 days ago

    St Louis, United States General Dynamics Information Technology Full time

    Transform technology into opportunity as a Systems Administrator (Tier 2 Deskside Support) with GDIT. A career in enterprise IT means connecting and enhancing the systems that matter most. At GDIT you'll be at the forefront of innovation and play a meaningful part in improving how agencies operate. At GDIT, people are our differentiator. As a Systems...

  • Cyber Security Operations 3

    4 weeks ago

    Saint Louis, United States Strategic ASI Full time

    Our client is seeking a Cyber Security Operations 3 - Hunt Services team. This role will proactively search for indicators of compromise on NGA systems through planned Hunt missions. * Assign the Cybersecurity Operations Manager to direct and oversee all Contractor support for this sub service and serve as the primary Contractor representative to the...

  • Cyber Security Operations Specialist III

    3 weeks ago

    Saint Louis, United States RISA Full time

    Job DescriptionJob DescriptionSkill Level: Mid-Senior LevelSecurity Clearance: Top Secret /SCIJob Type: Full-TimeRemote: NoAbout RISA:In this time of rapid change, as technologies expand at lightning speed, RISA seeks to remain at the forefront - applying them in unique ways to address our customers’ challenges and providing our employees with engaging...

  • Technical Support Specialist

    4 days ago

    St Louis, United States Convergenz Full time

    SECRET clearance REQUIREDProvides advanced technical advice and guidance on installation, adaptation, configuration or enhancement of Company technical products, programs. Performs Tier III problem resolution on the telephone with users, walks the user through a series of steps to determine problem and classify level, priority and nature of the problems and...

  • Technical Support Specialist

    5 days ago

    St Louis, United States Convergenz Full time

    SECRET clearance REQUIREDProvides advanced technical advice and guidance on installation, adaptation, configuration or enhancement of Company technical products, programs. Performs Tier III problem resolution on the telephone with users, walks the user through a series of steps to determine problem and classify level, priority and nature of the problems and...

  • Senior Software Developer

    4 weeks ago

    St. Louis, United States CALIBRE Full time

    CALIBRE Systems Inc., an employee-owned Management Consulting and Digital Transformation Company is seeking aSoftware Developer (Senior) will develop, create, maintain, and write/code new (or modify existing)computer applications, software, or specialized utility programs.The Software Developer’s responsibilities include, but are not limited to, the...

  • Senior BIM

    1 hour ago

    St. Louis, United States Next Step Systems Full time

    Senior BIM / CAD Specialist, TS/SCI with SSBI Security Clearance Required, St. Louis, MO The ideal Senior BIM / CAD Specialist will provide support to the government by working closely with their design teams, engineering teams, and project management teams. This role requires knowledge and experience with completing accurate working plans and revisions for...

  • Senior Security Engineer with Security Clearance

    4 weeks ago

    Saint Louis, United States STEMboard Full time

    NGA – St. Louis, MO – TS/SCI Required STEMBoard is a technology solutions company that creates smart systems and software solutions for government and large-scale private sector clients. We are growing fast and need passionate, innovative people who love working with technology and are ready to make an impact. Here’s what you can expect from us: You...

  • Endpoint Engineer

    15 hours ago

    St Louis, United States GuidePoint Security Full time

    GuidePoint Security provides trusted cybersecurity expertise, solutions and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation's top organizations, such as Fortune 500 companies and U.S. government agencies,...

  • ERP Analyst II or III

    5 days ago

    St. Louis, United States Envision LLC Full time

    Job DescriptionAll candidates that where submitted to this role have been passed on.We are requesting new resumes, please do not resubmit previous candidates.ERP Analyst III – Techno Functional, Finance. This position is 40% functional and 60% technical. We need someone with experience in Oracle, EBS, and SQL. This is a Hybrid position working in the...

  • ERP Analyst II or III

    4 days ago

    St Louis, United States Envision Full time

    Job Description All candidates that where submitted to this role have been passed on. We are requesting new resumes, please do not resubmit previous candidates. ERP Analyst III – Techno Functional, Finance. This position is 40% functional and 60% technical. We need someone with experience in Oracle, EBS, and SQL. This is a Hybrid position working in the...

  • Cyber Security Operations Specialist

    6 days ago

    St Louis, United States SITEC Consulting LLC Full time

    Position Overview: Provide CSOC Tier 2 services, which is 24x7x365 coordination, execution, and implementation of all actions required for the containment, eradication, and recovery measures for events and incidents. CSOC Tier 2 services includes malware and implant analysis, and forensic artifact handling and analysis. When a CIRT is stood up, all...

  • ERP Analyst II or III

    6 days ago

    St. Louis, United States Envision LLC Full time

    Job Description@STL RecruitersUpdate 4/24**All candidates that where submitted to this role have been passed on.We are requesting new resumes, please do not resubmit previous candidates.ERP Analyst III – Techno Functional, Finance. This position is 40% functional and 60% technical. We need someone with experience in Oracle, EBS, and SQL. This is a Hybrid...

  • ERP Analyst II or III

    1 day ago

    St Louis, United States Envision Full time

    Job Description @STL Recruiters Update 4/24**All candidates that where submitted to this role have been passed on.We are requesting new resumes, please do not resubmit previous candidates. ERP Analyst III Techno Functional, Finance. This position is 40% functional and 60% technical. We need someone with experience in Oracle, EBS, and SQL. This is a Hybrid...