Cyber Incident Response Lead

Base One Technologies; Arlington (VA); On-site; USD 90,000 - 130,000; Full time

Job summary

Base One Technologies in Arlington, VA seeks a cyber incident management professional to correlate incident data, triage threats, and coordinate resolution across teams.

Responsibilities include applying NIST/FISMA-aligned practices, researching mitigations, and monitoring threat intel to protect enterprise networks. Candidates should hold an active TS/SCI clearance and DHS suitability eligibility.

Qualifications

• Active TS/SCI clearance is required.
• Must be able to obtain DHS Suitability.
• 1+ year of directly relevant experience in cyber incident management or cybersecurity operations.
• Knowledge of incident response and handling methodologies.
• Familiarity with NIST 800-62 and FISMA reporting.
• Knowledge of NCCIC National Cyber Incident Scoring System for triage prioritization.
• Knowledge of general attack stages (foot printing, scanning, enumeration, access, escalation, maintenance, exploitation, covering tracks).
• Knowledge of vulnerabilities and associated attacks.
• Knowledge of basic system administration and OS hardening, CND policies and regulations.
• Knowledge of different operational threat environments (script kiddies, non-nation-state, nation-state).

Responsibilities

• Correlating incident data to identify trends in reported incidents.
• Recommending defense in depth principles and practices.
• Performing Computer Network Defense incident triage to determine scope, urgency, and potential impact.
• Researching and compiling known resolution steps to mitigate incidents.
• Applying cybersecurity concepts to detection and defense of intrusions and analyzing log data.
• Monitoring external data sources to stay current on CND threat conditions.
• Identifying incident causes and obtaining background info from external entities.
• Receiving and analyzing network alerts from enterprise sources and determining causes.
• Tracking and documenting CND incidents from detection to resolution while coordinating with other teams.
• Providing support during assigned shifts (M-F 1400-2230 EST).

Skills

TS/SCI clearance

DHS Suitability

Cyber incident mgmt

NIST 800-62

FISMA awareness

NCCIC scoring

Attack lifecycle

Vulnerability knowledge

System hardening

Threat environments

Education

BS in Cybersecurity/Incident Mgmt

HS Diploma + 3 years exp

Job description

Base One Technologies in Arlington, VA seeks a cyber incident management professional to correlate incident data, triage threats, and coordinate resolution across teams.

Responsibilities include applying NIST/FISMA-aligned practices, researching mitigations, and monitoring threat intel to protect enterprise networks. Candidates should hold an active TS/SCI clearance and DHS suitability eligibility.