Role OverviewThe Subject Matter Expert will provide support for on-and-off-site incident response to government agencies and critical infrastructure owners who experience cyber-attacks. They will deliver advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation using host- and network-based cybersecurity analysis capabilities.
What You Will Do
The Subject Matter Expert will serve as a hunt and incident response subject matter expert, applying in-depth knowledge of threat actor tools, techniques, and procedures (TTPs), with a focus on network centric and edge device compromises. They will also assist in maintaining branch process and procedure documentation and guides the completion of hunt and incident response activities.
Why It Might Be a Fit
The ideal candidate will have a strong understanding of network architecture and security, including routing, switching, VPNs, firewalls, segmentation, and defense in depth. They will also have experience performing cyber incident response (scoping, containment, eradication, recovery) in operational environments.
Requirements
- US Citizenship
- TS/SCI Clearance
- Ability to obtain DHS Suitability
- BS in Computer Science, Cyber Security, Computer Engineering, or related degree; OR HS Diploma/GED and 22+ years of technical experience in the area of expertise
- 10+ years of directly relevant experience
- 3+ years of experience related to the evaluation and implementation of new cyber response or network forensic capabilities
- Hands-on experience with incident response or network operations involving enterprise edge devices from at least two of the following vendors: Cisco, Ivanti, Palo Alto, Ciena, Juniper
]]>