Edge Device Cyber SME - Incident Response & Forensics

BCMC; Arlington (VA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Competitive salary

Employer-paid medical, dental & vision

Employer-paid life, STD & LTD

401k with company match

FSA for dependents & health care

Holiday & annual leave

Job summary

BCMC is seeking a Subject Matter Expert with deep expertise in edge device technologies (Cisco, Ivanti, Palo Alto, Ciena, Juniper) to support DHS Hunt and Incident Response Team. The role involves leading hunt and incident response efforts, evaluating new monitoring capabilities, and interfacing with government leads onsite and remotely.

Ideal candidates have 10+ years of relevant experience, TS/SCI clearance, and proven ability to analyze network traffic, device logs, and threat actor TTPs to

Qualifications

• U.S. Citizenship required.
• Active TS/SCI clearance required.
• 10+ years of directly relevant experience.
• 3+ years evaluating and implementing new cyber response or network forensics capabilities.
• Hands-on IR/NO experience with edge devices from at least two vendors.

Responsibilities

• Serve as hunt/IR SME focusing on network-centric and edge-device compromises.
• Evaluate and integrate new network forensics/monitoring capabilities.
• Coordinate onsite/remote incident response with Government lead.
• Communicate findings and recommendations clearly to customer stakeholders.
• Analyze network traffic, logs, and device telemetry to identify threats.

Skills

TS/SCI clearance

Incident response experience

Network security

Edge device expertise

Cisco / Ivanti / Palo Alto exposure

Education

BS in Computer Science or related field

HS Diploma + 22+ years of experience

Tools

Cisco

Ivanti

Palo Alto

Ciena

Juniper

Job description

BCMC is seeking a Subject Matter Expert with deep expertise in edge device technologies (Cisco, Ivanti, Palo Alto, Ciena, Juniper) to support DHS Hunt and Incident Response Team. The role involves leading hunt and incident response efforts, evaluating new monitoring capabilities, and interfacing with government leads onsite and remotely.

Ideal candidates have 10+ years of relevant experience, TS/SCI clearance, and proven ability to analyze network traffic, device logs, and threat actor TTPs to