Incident Response Analyst

General Requirements:

Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information.  Top Secret clearance preferred though Secret clearance may be considered

 

Must possess a background in incident handling and response.  Perform daily analytical actions in the performance of responding to incidents, identifying appropriate mitigation actions, identifying proper escalation procedures, and analyzing data collection and reporting requirements.  Assist in developing, managing, communicating, and implementing an incident response  program. It is preferred that this person be a current Certified Information Systems Security Professional (CISSP), or similar security professional certification Experience with Encase Enterprise edition or other Forensics tools is a plus.

 

Principal Duties & Responsibilities:

 

?  The primary responsibility of this position is incident handling and response.  Analyst will responds to computer security incidents and escalate when necessary as well as coordinate response to computer security incidents. Recommend a course of action on each incident. Creates, manages, and records all actions taken by Incident Response Teams. Serve as initial POC for Events of Interest reported both internally and externally. Establishes alarm/incident escalation process. Tracks, follows-up, and resolves incidents. Provides internal incident coordination. Initiates and maintains contact with affected parties during incident response lifecycle. Investigates potential incidents/intrusions. Follows up on post incident actions. Consults with investigative/enforcement entities on declared incidents.

?  Analyst may spend 10-20% of their job conducting forensics analysis.  He/She will to perform advanced forensics collection techniques using EnCase?  software; network scans; read and analyze packet traces and raw log dumps and provide reports of such data

?  Provide consulting advice on vulnerabilities or potential vulnerabilities within architecture

?  Communicate with excellent oral and written skills findings of such reports to all levels within TSA from executive staff to working level

?  Work closely with TSA staff to collaborate with FBI and other affiliated organizations during investigations or to obtain information for investigations

?  Develop and provide analysis reports

?  Provide consulting of known system vulnerabilities and exploits and develop and provide reports of such

?  Provide support, reports and all related deliverables on ?chain of custody? matters

?  This position may require on call duty

 

Please go to the following website to apply for this postion:  http://www.cytiva.com/kcg/careers.asp