Cyber Host Forensic Analyst IV

Nightwing; United States; Remoto; USD 122.000 - 253.000; Tempo pieno

Vantaggi offerti da questo lavoro

Medical, Vision & Dental Insurance

401k with Company Match

Paid Time Off & Holidays

Descrizione del lavoro

Nightwing seeks Incident Response Experts to support the DHS Hunt and Incident Response Team (HIRT). The role requires active TS/SCI with U.S. citizenship, and will involve domestic travel for training and field operations.

You will serve as SME, translating complex findings into concise executive summaries and in-depth reports, guiding incident response activities and collaborating across locations. Ideal candidates bring 8+ years of direct incident response experience, strong OS knowledge

Competenze

• U.S. Citizenship and active TS with SCI eligibility required.
• Must be able to obtain DHS Suitability.
• 8+ years of directly relevant incident response experience.
• Knowledge of multiple operational threat environments (script kiddies to nation-state).
• Proficiency with common OS (Linux/Unix, Windows).
• Ability to travel domestically on short notice.
• Excellent written and verbal communication skills.

Mansioni

• Serve as hunt and incident response SME with NCCIC HIRT context.
• Distill analytic findings into executive summaries and technical reports.
• Provide expert support and research for complex problems in hunt and incident response.
• Act as technical expert on high-level incident response teams; provide direction and alternatives.
• Exercise latitude in determining technical objectives and outcomes.
• Develop technical solutions to complex problems requiring ingenuity.
• Guide the completion of hunt and incident response activities.

Conoscenze

Citizenship

Active TS/SCI

DHS Suitability

8+ Years Experience

Independent Thinking

Communication Skills

Collaborative Work

Threat/Attack Knowledge

Linux/Unix

Windows

Formazione

B.S. in CS/Cyber Security/CE or related

HS Diploma + 10+ years experience

Strumenti

Wireshark

Splunk

Snort

Descrizione del lavoro

Nightwing provides technically advanced full-spectrum cyber, data operations, systems integration and intelligence mission support services to meet our customers’ most demanding challenges. Our capabilities include cyber space operations, cyber defense and resiliency, vulnerability research, ubiquitous technical surveillance, data intelligence, lifecycle mission enablement, and software modernization. Nightwing brings disruptive technologies, agility, and competitive offerings to customers in the intelligence community, defense, civil, and commercial markets.

The DHS’s Hunt and Incident Response Team (HIRT) secures the nation’s infrastructure. HIRT provides DHS’s front-line response for cyber incidents and proactive hunting for malicious cyber activity. Nightwing provides support for on and offsite incident response to Government agencies and critical infrastructure owners who experience cyber-attacks. Nightwing provides HIRT advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation, using host and network-based cybersecurity analysis capabilities. Personnel perform investigations to characterize the level of severity of breaches and develop mitigation/remediation plans. Nightwing is seeking Incident Response Experts to support this critical customer mission.

This position will require physical presence in the National Capital Region (NCR) for at least 1 week for training and orientation. Subsequent work will be primarily supported outside the NCR.

Responsibilities:

• Serves as hunt and incident response subject matter expert (SME), possessing in-depth knowledge on subjects relating to the conduct, activities, or operation of NCCIC HIRT in a surge capacity

• Distills analytic findings into executive summaries and in-depth technical reports

• Provide expert support, analysis, and research with only broad direction into exceptionally complex problems and processes relating to the subject matter as it relates to hunt and incident response activities

• Serves as technical expert on high-level incident response teams providing technical direction, interpretation, and alternatives

• Exercises considerable latitude in determining technical objectives of an assignment or task at hand

• Independently develops technical solutions to complex problems that require the regular use of ingenuity and creativity

• Guides the completion of hunt and incident response activities

Required Skills:

• U.S. Citizenship

• Must have an active TS with SCI Eligibility

• Must be able to obtain DHS Suitability

• 8+ years of directly relevant experience in the area of expertise

• Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored])

• Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return- oriented attacks, and malicious code)

• Must be able to travel domestically on short notice

• Ability to think independently

• Demonstrates superior written and oral communication skills

• Must be able to work collaboratively across physical locations

• Skilled in identifying different classes of attacks and attack stages

• Understanding of system and application security threats and vulnerabilities

• Understanding of proactive analysis of systems and networks, to include creating trust levels of critical resources

• Proficiency with common operating systems (e,g, Linux/Unix, Windows)
  

Desired Skills:

• Experience leading and mentoring technical teams

• Knowledge of Computer Network Defense policies, procedures and regulations

• Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored])

• Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return- oriented attacks, and malicious code)

• WireShark

• Splunk

• Snort

Required Education:

BS Computer Science, Cyber Security, Computer Engineering, or related degree; or HS Diploma & 10+ years of technical experience in the area of expertise.

Desired Certifications: One or more

• DoD 8140.01 IAT Level II, IASAE II, CSSP Analyst

• DoD 8140.01 GCIA, GCIH, CSSP Analyst/CSSP Incident Responder

• DoD 8140.01 CEH, CSSP Analyst

• SANS GIAC GNFA preferred

• SANS GRID, GICSP, or GCIP a plus

Salary & Benefits

The salary associated with this position ($122,000-$253,000) is commensurate with the selected candidate’s qualifications, years of relevant experience, and demonstrated level of expertise. Compensation will be determined based on these factors to ensure alignment with skills, responsibilities, and market standards.

Nightwingoffers medical, vision and dental insurance coverage in addition to a 401k plan, PTO, Holidays, and additional insurances.

Nightwing is An Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age or any other federally protected class.