Cyber Incident Response Expert

bcmcllc; Arlington (VA); On-site; USD 120,000 - 170,000; Full time

Benefits offered by this job

Competitive salary

Employer-paid health and life benefits

Job summary

BCMC is seeking a Cyber Incident Response Expert to support the DHS Hunt and Incident Response Team (HIRT). The role involves advanced host and network analysis, incident containment, and rapid on-site response for government agencies and critical infrastructure owners.

You will distill findings into executive briefs and technical reports, guide response activities with senior teams, and help maintain process documentation across branches.

Qualifications

• U.S. Citizenship required.
• Active TS/SCI clearance required.
• Must be able to obtain DHS Suitability.
• 7+ years of directly relevant experience.
• 3+ years evaluating and implementing new cyber response capabilities.
• Must be able to travel domestically on short notice.
• Strong understanding of network architecture/security.
• Experience performing cyber incident response.
• Excellent written and oral communication skills.
• Ability to work across multiple locations.

Responsibilities

• Serve as hunt and incident response SME, applying in-depth knowledge of threat actor TTPs.
• Support technology insertion teams as incident response expert.
• Distill analytic findings into executive summaries and technical reports.
• Provide expert analysis and research for complex problems in hunt/IR.
• Lead high-level incident response teams and provide technical direction.

Skills

Threat hunting

Incident response

Network security

Independent thinking

Technical communication

Collaboration across locations

Travel on short notice

Education

Bachelor's degree or HS Diploma with 7+ years experience

CS, Cyber Security, or related field

Tools

Linux/Unix

Windows

Job description

The DHS’s Hunt and Incident Response Team (HIRT) secures the nation’s infrastructure. HIRT provides DHS’s front‑line response for cyber incidents and proactive hunting for malicious cyber activity. BCMC provides support for on and off‑site incident response to Government agencies and critical infrastructure owners who experience cyber‑attacks. BCMC provides HIRT advanced technical assistance, proactive hunting, rapid onsite incident response, and immediate investigation, using host and network‑based cybersecurity analysis capabilities. Personnel perform investigations to characterize the level of severity of breaches and develop mitigation/remediation plans. We are seeking a Cyber Incident Response Expert to support this critical customer mission.

Responsibilities

• Serves as hunt and incident response subject matter expert (SME), applying in‑depth knowledge on threat actor (TA) tools, techniques, and procedures (TTPs)
• Serves as an incident response expert in support of a technology insertion team
• Distills analytic findings into executive summaries and in‑depth technical reports
• Provides expert support, analysis, and research with only broad direction into exceptionally complex problems and processes relating to the subject matter as it relates to hunt and incident response activities
• Serves as technical expert on high‑level incident response teams providing technical direction, interpretation, and alternatives
• Exercises considerable latitude in determining technical objectives of an assignment or task at hand
• Independently develops technical solutions to complex problems that require the regular use of ingenuity and creativity
• Analyzes incident data and victim environments to recommend targeted mitigations
• Advises technical personnel on countermeasure implementation and customization
• Supports internal stakeholders on containment and eradication missions
• Documents analysis in a standardized knowledgebase for sharing and publication
• Assists in maintaining branch process and procedure documentation
• Guides the completion of hunt and incident response activities

Required Skills

• U.S. Citizenship
• Must have an active TS/SCI clearance
• Must be able to obtain DHS Suitability
• 7+ years of directly relevant experience in the area of expertise
• 3+ years of experience related to the evaluation and implementation of new cyber response capabilities
• Must be able to travel domestically on short notice
• Strong understanding of network architecture/security
• Experience performing cyber incident response
• Ability to think independently
• Demonstrates superior written and oral communication skills
• Must be able to work collaboratively across physical locations
• Skilled in identifying different classes of attacks and attack stages
• Understanding of system and application security threats and vulnerabilities
• Understanding of proactive analysis of systems and networks, to include creating trust levels of critical resources
• Proficiency with common operating systems (e.g., Linux/Unix, Windows)

Desired Skills

• Experience leading and mentoring technical teams
• Knowledge of Computer Network Defense policies, procedures and regulations
• Knowledge of different operational threat environments (e.g., first generation, second generation, and third generation)
• Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross‑site scripting, PL/SQL and injections, race conditions, covert channel, replay, return‑oriented attacks, and malicious code)
• Network and System administration experience
• Strong understanding of adversarial tactics/techniques/procedures (TTPs)
• Experience with Identity and Access Management (IAM) tools
• Ability to review and analyze Enterprise Architecture (EA) from a security perspective
• Understanding of cyber defense‑in‑depth principles
• Hands‑on skill in host/network intrusion detection
• Ability to perform event correlation
• Experience with malicious activity analysis
• Ability to collaborate with stakeholders at multiple levels within an organization

Required Education

BS Computer Science, Cyber Security, Computer Engineering, or related degree; or HS Diploma & 7+ years of technical experience in the area of expertise.

Desired Certifications

• DoD 8140.01 IAT Level II, IASAE II, CSSP Analyst
• DoD 8140.01 GCIA, GCIH, CSSP Analyst/CSSP Incident Responder
• DoD 8140.01 CEH, CSSP Analyst
• SANS GIAC GNFA preferred
• SANS GRID, GICSP, or GCIP a plus

Company Overview

Business Computers Management Consulting Group, LLC (BCMC) is a small business specializing in Information Technology (IT), Cybersecurity, Information Assurance (IA), SOA, Big Data Management, Program Management, and more for Federal, State, and Local agencies. We possess highly skilled engineers, providing innovative solutions backed by strong past performances. We are ISO 9001:2015, ISO 27001:2013, 20000:2018, and CMMI L3 certified and registered promising highest quality and services to all of our clients.

Benefits

• Extremely competitive salary
• 95% employer paid for employee medical, dental, & vision coverages
• 100% employer paid for employee life, STD & LTD disability coverages
• 401(k) with company match and profit sharing
• Flexible Spending Account (FSA) for dependent & health care
• 11 standard holidays & 3 weeks of annual leave