Cyber Incident Response Lead

bcmcllc; Arlington (VA); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Extremely competitive salary

Employer-paid health coverage

Employer-paid life/STD/LTD

Job summary

BCMC is supporting a U.S. Government customer to provide onsite incident response for civilian agencies and critical asset owners during cyber-attacks. The Cyber Incident Manager will investigate, triage, coordinate mitigation, and help restore services across enterprise networks.

Responsibilities include correlating trends, recommending defense in depth, and maintaining incident documentation from initial detection through final resolution. Active TS/SCI clearance and U.S.

Qualifications

• 1+ years of directly relevant experience in cyber incident management or cybersecurity operations.
• Knowledge of incident response and handling methodologies.
• Familiarity with NIST 800-62 and FISMA as they pertain to incident reporting.
• Understanding of NCCIC scoring system to prioritize triaging of incidents.
• Knowledge of common attack stages from reconnaissance to network exploitation.
• Awareness of system and application security threats and vulnerabilities.

Responsibilities

• Correlating incident data to identify trends in reported incidents.
• Recommending defense in depth principles.
• Performing CND incident triage to determine scope, urgency, and impact.
• Researching resolution steps or workarounds for mitigation.
• Applying cybersecurity concepts to intrusions and conducting log data analysis.
• Monitoring external data sources for threat conditions affecting the enterprise.
• Identifying causes of incidents and learning about infection vectors from external entities.
• Receiving and analyzing network alerts and determining possible causes.
• Tracking CND incidents from detection to resolution and coordinating information with other teams.
• Providing support during assigned shifts.

Skills

Cyber incident management

Incident response methodologies

NIST 800-62 familiarity

FISMA knowledge

CND concepts

Threat handling

Log analysis basics

Vulnerability recognition

Incident triage

Team coordination

Education

BS in Incident Management or Cybersecurity

HS Diploma + 3 years incident management experience

Tools

NCCIC National Cyber Incident Scoring System

Job description

BCMC is supporting a U.S. Government customer to provide onsite incident response for civilian agencies and critical asset owners during cyber-attacks. The Cyber Incident Manager will investigate, triage, coordinate mitigation, and help restore services across enterprise networks.

Responsibilities include correlating trends, recommending defense in depth, and maintaining incident documentation from initial detection through final resolution. Active TS/SCI clearance and U.S.