Incident Responder

The Incident Responder will serve as a digital first responder, helping defend the Navy's critical maritime intelligence networks against cyber threats. The role involves responding to and investigating cybersecurity incidents, containing affected systems, and collaborating with cybersecurity, intelligence, and investigative partners.

What You Will Do

Perform all phases of the incident response lifecycle, including detection, analysis, containment, eradication, and recovery. Receive and respond to incident notifications from customers via telephone and email.

Why It Might Be a Fit

The ideal candidate will have extensive experience in the Computer Network Defense (CND) discipline, significant professional experience monitoring, analyzing, and investigating alerts generated by cybersecurity tools, and experience with Security Information and Event Management (SIEM) systems.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Information Assurance, or a related area of study
• 8+ years of experience or Master’s degree with 6+ years of experience
• Active TS/SCI security clearance
• Extensive experience in the Computer Network Defense (CND) discipline
• Significant professional experience monitoring, analyzing, and investigating alerts generated by cybersecurity tools
• Experience with Security Information and Event Management (SIEM) systems such as Splunk and Elastic
• Experience with Network Intrusion Detection/Prevention Systems (NIDPS), such as Cisco FirePower and Palo Alto NGFW, as well as host based tools such as Trellix ePO, Microsoft Defender, and Tanium
• Knowledge of scripting and coding languages such as Python, Perl, Ruby, JavaScript, PowerShell, C, C++, and Java
• Knowledge of penetration testing and red team tactics, techniques, and procedures, as well as tools such as Kali, SamuraiWTF, Nmap, Burp Suite, sqlmap, and Metasploit
• Knowledge of ticketing systems, report writing, and intelligence gathering, analysis, and dissemination techniques specific to cybersecurity
• Required Certifications: Certified Ethical Hacker (CEH), CyberSec First Responder (CFR), CompTIA Cybersecurity Analyst (CySA+), GIAC Certified Forensic Analyst (GCFA), GIAC Certified Incident Handler (GCIH), EC Council Certified Incident Handler (ECIH), or Cisco Cybersecurity Specialist (SCYBER)

Benefits

• Dental insurance
• Vision insurance
• Pay Range $107,900.00 - $195,050.00