Cyber Defense Incident Responder

Oak Ridge, TN

Full-time

Hybrid

$85K/yr - $193K/yr

Entry, Mid Level

Booz Allen Hamilton is a consulting firm that specializes in analytics, technology, and engineering. They are seeking a Cyber Defense Incident Responder to process and analyze cyber threat intelligence data, develop intelligence products, and mentor team members while responding to cyber incidents.

Apply Now

Responsibilities

Process and analyze cyber threat intelligence data and compile standard and ad-hoc reports as needed.
Leverage expertise of cyber data and information, analyze and identify data requirements, use specialized tools and services, and develop intelligence products.
Apply advanced consulting skills or extensive technical expertise, including full industry knowledge.
Develop innovative solutions to complex problems.
Work without considerable direction, and mentor and supervise team members.
Ability to investigate, analyze, and respond to cyber incidents within the network environment or enclave to coordinate and provide senior-level technical support to enterprise-wide cyber defense analysts to resolve cyber defense incidents and determine the scope, urgency, and impact of cyber defense incidents.
Ability to coordinate incident response functions and recommend incident remediation strategies.
Ability to correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation.
Ability to perform analysis of log files from a variety of sources, including individual host logs, network traffic logs, firewall logs, and intrusion detection system (IDS) logs, to identify possible threats to network security.
Ability to perform cyber defense incident triage, including identify the specific vulnerability and make recommendations that enable expeditious remediation.
Ability to perform real-time cyber defense incident handling tasks, including forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation, to support deployable Incident Response Teams (IRTs).
Ability to receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts.

Qualification

Required

2+ years of experience with performing cybersecurity for federal government agencies
Ability to investigate, analyze, and respond to cyber incidents within the network environment or enclave to coordinate and provide senior-level technical support to enterprise-wide cyber defense analysts to resolve cyber defense incidents and determine the scope, urgency, and impact of cyber defense incidents
Ability to coordinate incident response functions and recommend incident remediation strategies
Ability to correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation
Ability to perform analysis of log files from a variety of sources, including individual host logs, network traffic logs, firewall logs, and intrusion detection system (IDS) logs, to identify possible threats to network security
Ability to perform cyber defense incident triage, including identify the specific vulnerability and make recommendations that enable expeditious remediation
Ability to perform real-time cyber defense incident handling tasks, including forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation, to support deployable Incident Response Teams (IRTs)
Ability to receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts
Top Secret clearance
Bachelor’s degree in an Information Systems or Cybersecurity field