Incident Response Analyst with Security Clearance

Statement of Status: eTRANSERVICES has submitted a bid and is currently awaiting award notification. While the position has not yet been officially confirmed, we are actively preparing to fill the role once the bid is awarded. We are seeking qualified candidates for Senior Internet/Intranet Webmaster. This job is contingent upon the bid being awarded. Upon award, this is a 5-year contract and starts in March 2025 Overview: Plans and implements security measures to protect computer systems, networks, and data from loss and service interruptions.
Analyzes and documents security risks, breaches, and other cyber security incidents and the damage they cause.
Develops and implements a network disaster recovery plan, and oversees the monitoring of the computer networks for security issues.
Installs and operates security software and measures to protect systems and information infrastructure, including firewalls and data encryption programs.
Collaborates with the security team to perform tests and find network weaknesses.
Researches and recommends security enhancements and purchases.
Works with management to develop best practices.
Basic Qualifications:
Bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or related field PLUS twelve (12) years of experience in incident detection and response, malware analysis, and or cyber forensics.
4+ years of supervising and/or managing teams
6+ years of intrusion detection and/or incident handling experience
Ability to analyze new attacks and provide guidance to watch floor analysts on detection and response
Knowledgeable of the various Intel Frameworks (e.g. Cyber Kill Chain, Diamond Model, MITRE ATT&CK, etc) and able to utilize it in their analysis workflow
Experience with Cloud (e.g. o365, Azure, AWS, etc) security monitoring and familiar with cloud threat landscape
Experience with at least 3 of these tools: ARMIS; Cloudflare; Trellix Security: Cloud/Data/Email/Endpoint/Network Security; Threat Intelligence; SIEM; Microsoft Azure/Defender/Sentinel; RSA NetWitness Logs and Packets; Rapid 7 Nexpose/App Spider; Stealthwatch Netflow; Tenable IO/Web App Scanning; Varonis Data Protection; XACTA 360/IO