Cybersecurity Incident Response Specialist

2 weeks ago


Huntsville, Alabama, United States Quantum Research International Full time

Overview:

Quantum Research International, Inc. is dedicated to delivering exceptional services and products to our national defense and federal civilian clients across various sectors, including: 1) Cybersecurity and Information Operations; 2) Space Operations and Control; 3) Aviation Systems; 4) Ground, Air, and Missile Defense; 5) Intelligence Program Support; 6) Experimentation and Testing; 7) Program Management; and 8) Audio/Visual Technology Applications. While our corporate headquarters is in Huntsville, AL, we actively recruit for positions nationwide and internationally, ensuring high-quality support to the U.S. Government and our Nation's Warfighters.

Mission:

We are in search of a highly skilled Cyber Incident Response and Forensics Analyst to join the National Cyber Security Operations Center's DFIR Team. In this capacity, you will engage in incident response activities, including triage, data collection, analysis, containment, and remediation. You will also participate in proactive threat hunting efforts to uncover previously undetected compromises. Furthermore, you will assist clients in preparing for cybersecurity incidents by developing operational playbooks and facilitating tabletop exercises.

Responsibilities:

  • Conduct Tier 2 or higher analysis within our Security Operations Center to identify incidents or events necessitating further investigation.
  • Identify attacker tools, tactics, and procedures in Indicators of Compromise (IOCs) applicable to detection rules, threat hunting missions, and ongoing investigations.
  • Analyze submissions to client phishing inboxes and investigate for malicious content and attachments.
  • Maintain strict chain-of-custody protocols and ensure positive control over devices and media submitted by clients.
  • Perform host forensics, network forensics, log analysis, and malware triage to support incident response investigations and root cause analysis.
  • Leverage new technologies to conduct remote investigations and examine endpoint and network-based sources of evidence.
  • Communicate investigation findings effectively and present comprehensive reports, training, and presentations tailored for both technical and executive audiences, including recommendations for enhancing client cybersecurity posture.
  • Other responsibilities may include team building, mentorship, and execution of leadership tasks.

Requirements:

  • Bachelor's Degree in a relevant technical field is preferred; however, 4+ years of experience and certifications may be considered in lieu of a degree.
    1. Relevant certifications may include: CISSP, CISA, GCFA, GCFE, GNFA, CySA+, GCIA, GCIH, OSCP, Security+, CEH, or GSEC.
  • A minimum of 3 years of experience in an Incident Response role, with expertise in host forensics, memory analysis, network traffic analysis, and log analysis; DoD/military experience is advantageous.
  • Proficiency with industry-standard IR and forensic tools, such as EnCase, Magnet Axiom, FTK, SIFT, or other open-source forensic tools.
  • Comprehensive understanding of the incident response lifecycle and digital forensic investigative methodologies.
  • Strong technical documentation skills, with experience in writing reports and conveying technical details clearly and concisely.
  • Solid understanding of IP networking fundamentals, protocols, and port security.
  • Able to work effectively both independently and within a team environment.
  • Willingness to travel occasionally within the U.S.
  • Must be eligible to obtain and maintain a DoD Security Clearance.

Desired Skills and Qualifications:

  • Experience with Security Information and Event Management (SIEM) platforms, such as Splunk.
  • Experience in malware and binary analysis, including both basic and advanced static and dynamic analysis, disassembly, and debugging.
  • Familiarity with various operating systems, including Windows, Linux, and Mac, for investigative purposes.
  • Experience in acquiring endpoint data from both networked and non-networked environments.
  • Certifications: CISSP, CISA, GCFA, GCFE, GNFA, CySA+, GCIA, GCIH, OSCP, Security+, CEH, or GSEC.

Equal Opportunity Employer/Affirmative Action Employer M/F/D/V:

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity, or any other characteristic protected by law. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.



  • Huntsville, Alabama, United States Quantum Research International Full time

    Overview:Quantum Research International, Inc. specializes in delivering top-tier services and products across various sectors, including: 1) Cybersecurity and Information Operations; 2) Space Operations and Control; 3) Aviation Systems; 4) Ground, Air, and Missile Defense; 5) Intelligence Programs Support; 6) Experimentation and Testing; 7) Program...


  • Huntsville, Alabama, United States Quantum Research International Full time

    Overview:Quantum Research International, Inc. is dedicated to delivering exceptional services and products across various sectors, including: 1) Cybersecurity and Information Operations; 2) Space Operations and Control; 3) Aviation Systems; 4) Ground, Air, and Missile Defense; 5) Intelligence Program Support; 6) Experimentation and Testing; 7) Program...


  • Huntsville, Alabama, United States Quantum Research International Full time

    Overview:Quantum Research International, Inc. specializes in delivering comprehensive services and solutions to national defense, federal civilian, and industry clients across various domains, including: 1) Cybersecurity and Information Operations; 2) Space Operations and Control; 3) Aviation Systems; 4) Ground, Air, and Missile Defense; 5) Intelligence...


  • Huntsville, Alabama, United States Quantum Research International Full time

    Overview:Quantum Research International, Inc. specializes in delivering comprehensive services and innovative solutions across various sectors, including: 1) Cybersecurity and Information Operations; 2) Space Operations and Control; 3) Aviation Systems; 4) Ground, Air, and Missile Defense; 5) Intelligence Support; 6) Experimentation and Testing; 7) Program...


  • Huntsville, Alabama, United States Quantum Research International Full time

    Overview:Quantum Research International, Inc. is dedicated to delivering exceptional services and products to our national defense and federal civilian clients across various domains, including: 1) Cybersecurity and Information Operations; 2) Space Operations and Control; 3) Aviation Systems; 4) Ground, Air, and Missile Defense; 5) Intelligence Programs...


  • Huntsville, Alabama, United States MartinFederal Consulting LLC Full time

    Job SummaryMartinFederal Consulting LLC is seeking a highly skilled Cybersecurity Operations Specialist to join our team. As a key member of our cybersecurity operations team, you will be responsible for tracking, documenting, and reporting incidents from initial detection to final resolution in accordance with NASA standard operating procedures and...


  • Huntsville, Alabama, United States MartinFederal Consulting LLC Full time

    Job SummaryMartinFederal Consulting LLC is seeking a highly skilled Cybersecurity Operations Specialist to join our team. As a key member of our cybersecurity operations team, you will be responsible for tracking, documenting, and reporting incidents from initial detection to final resolution in accordance with NASA standard operating procedures and...


  • Huntsville, Alabama, United States Leidos Full time

    Cybersecurity Specialist Job DescriptionLeidos is seeking a highly skilled Cybersecurity Specialist to play a critical role in monitoring and analyzing the security posture of networks, servers, endpoints, and other systems.Key Responsibilities:Incident Response: Ensure security issues are addressed promptly upon discovery, and investigate computer and...


  • Huntsville, Alabama, United States MITRE Full time

    Job SummaryWe are seeking a highly skilled Cybersecurity Operations Engineer to join our team at MITRE. As a key member of our Defensive Cyber Operations department, you will be responsible for providing engineering support for a Centralized Logging Initiative.Key ResponsibilitiesConsult and interface with customers to understand log collection requirements...


  • Huntsville, Alabama, United States Qualis Corporation Full time

    Job OverviewQualis Corporation, a prominent entity in the Defense & Space sector, is in search of a skilled Cybersecurity Specialist. We are dedicated to fostering a supportive work atmosphere that values diversity, innovation, collaboration, and community engagement. In this role, you will play a crucial part in safeguarding our systems, networks, and...


  • Huntsville, Alabama, United States Booz Allen Hamilton Full time

    About the RoleWe are seeking a highly skilled Cybersecurity Risk Specialist to join our team at Booz Allen Hamilton. As a Cybersecurity Risk Specialist, you will play a critical role in helping our clients understand and mitigate their cyber risks.Key ResponsibilitiesAssess the cybersecurity posture of IT, mission, space systems, or industrial control...


  • Huntsville, Alabama, United States Interactive Process Technology LLC Full time

    Job OverviewPosition: Cybersecurity Risk Management SpecialistCompany: Interactive Process Technology LLCAt Interactive Process Technology LLC, we are dedicated to delivering advanced technical solutions that align with our clients' operational requirements. Our team thrives on collaboration with clients, technical experts, and partners to create effective...


  • Huntsville, Alabama, United States Booz Allen Hamilton Full time

    Job Summary:We are seeking a highly skilled Cybersecurity Specialist to join our team at Booz Allen Hamilton. As an Information System Security Officer, you will play a critical role in identifying and mitigating cyber risks, collaborating with law enforcement, and developing risk mitigation strategies.Key Responsibilities:Collaborate with law enforcement...


  • Huntsville, Alabama, United States Method Products Full time

    Position Overview:Method Products is seeking a Cybersecurity Compliance Specialist to enhance our team. The Cybersecurity Compliance Specialist will be tasked with formulating, revising, and executing security protocols, procedures, and standards to protect the IT Portfolio and ensure adherence to relevant guidelines. This role encompasses responding to...


  • Huntsville, Alabama, United States Jacobs Full time

    About the Role:We are seeking a highly skilled Critical Incident Coordinator (Senior) to join our team at Jacobs in a Top Secret cleared position. The successful candidate will be part of a team that leads large-scale data analysis projects, designing and delivering on-premises and cloud-based applications. The Critical Incident Coordinator (Senior) will be...


  • Huntsville, Alabama, United States Leidos Full time

    About the RoleLeidos is seeking a highly skilled Cybersecurity Specialist to join our team in support of NASA's National Security Systems team.Key ResponsibilitiesIncident Response: Ensure security issues are addressed promptly upon discovery.Threat Intelligence: Collect and analyze intelligence to correlate adversary tactics, techniques, and...


  • Huntsville, Alabama, United States Booz Allen Hamilton Full time

    Overview:In today's digital landscape, the prevalence of cyber threats poses significant challenges for organizations. Government agencies, in particular, face a complex environment where understanding and managing these risks is crucial.Key Responsibilities:As a Cybersecurity Risk Management Specialist, you will play a vital role in helping organizations...


  • Huntsville, Alabama, United States Exeter Government Services LLC Full time

    Position Title: Senior Cybersecurity Assurance SpecialistLocation: Huntsville, ALSecurity Clearance Required: SecretCertifications Needed: DoD 8570.1M IAM-IIIEducational Background: Bachelor's Degree in Information Technology, Engineering, or a related technical field, or equivalent professional experience.Experience Requirements: 10+ years in the fieldRole...


  • Huntsville, Alabama, United States Canvas Inc. Full time

    Job OverviewPosition Title: Cybersecurity SpecialistLocation: Remote (with occasional onsite requirements)Canvas Inc. is in search of a Cybersecurity Specialist to enhance the security measures within our organization. The selected individual will be responsible for providing expert guidance to management and technical teams in the formulation of security...


  • Huntsville, Alabama, United States HudsonAlpha Institute for Biotechnology Full time

    Position Title: Cybersecurity SpecialistPosition Type: Full-TimeReports to: Director of Information TechnologyINSTITUTE OVERVIEWThe HudsonAlpha Institute for Biotechnology is a nonprofit research organization committed to pioneering advancements in genomic technology and sciences. Established in 2008, its mission encompasses four key areas: igniting...