24x7 Cybersecurity Incident Response Specialist

(EDO) Entertainment Data Oracle, Inc.; St. Louis (MO); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Flexible work environment

401(k) matching

Paid training and tuition

Job summary

Freedom Technology Solutions Group seeks a Cybersecurity Operations Specialist for 24x7 incident response. You will coordinate containment, eradication, and recovery actions, perform malware analysis, and develop investigation reports under Government guidance.

Responsibilities include building response artifacts, collaborating with agencies, and ensuring proper reporting and triage across CSOC and NGA networks.

Qualifications

• Bachelor’s degree or 6 years of Cyber Security experience.
• Active TS/SCI clearance with ability to obtain a polygraph.
• DoDD 8140.01 and DoD 8570.01-M IAT Level II and CSSP Incident Responder certification.
• Serve as C-IRT member and work under Government C-IRT Commander.
• Develop and coordinate courses of action with government and contract stakeholders; execute Defensive Cyberspace Operations on NGA networks and systems when authorized.
• Perform digital media analysis and malware reverse engineering on host, server, and network data.
• Execute custom scripts, tools, and capabilities for data collection and analysis when authorized.
• Develop, document, and provide incident investigation reports within 30 days of C-IRT stand‑down.

Responsibilities

• Coordinate and execute tasks, perform analysis, and build/document response activities during cyber security incident response.
• Implement containment measures such as IP blocks, domain blocks, and disabling user accounts on direction of the Government.
• Coordinate with Security and Installations Directorate, Insider Threat Office, and other law enforcement for investigation and triage of incidents.
• Collaborate with authorities to produce security incident reports.
• Categorize incidents and events.
• Coordinate with other contracts to ensure incidents are reported and eradicated.
• De-conflict blue/red team activity with open incidents/events.
• Assist NGA in incident recovery.
• Build timelines, documents, briefings, and other products to inform stakeholders of response actions and impacts.
• Document actions and analysis in the authorized ticketing system with reconstructable detail.
• Generate and update reports in JIMS, ICMS, and other reporting systems.
• Develop, maintain, sustain, and execute scripts/tools for data collection and analysis.
• Perform digital media analysis on host/server/network data.
• Identify indicators of compromise to stakeholders.
• Provide adversary attribution.
• Perform malware analysis and signature development.
• Coordinate with CSOC Tier 1/2 to remediate discrepancies.

Skills

Active TS/SCI clearance

Incident response

Forensic analysis

Education

Bachelor’s degree in Cyber Security

6 years cybersecurity experience

Tools

JIMS

ICMS

CIRT reporting systems

Job description

Freedom Technology Solutions Group seeks a Cybersecurity Operations Specialist for 24x7 incident response. You will coordinate containment, eradication, and recovery actions, perform malware analysis, and develop investigation reports under Government guidance.

Responsibilities include building response artifacts, collaborating with agencies, and ensuring proper reporting and triage across CSOC and NGA networks.