Jr. Cyber Security Analyst (Incident Response)

Job Title: Jr. Cyber Security Analyst (Incident Response) Requisition ID: 17003LL Job Category: Security Services Job Type: Regular Primary Location: USA-VA: VIRGINIA-LEESBURG Schedule: Full-time Remote Work Authorized: No Relocation Assistance: Not Available Travel: No Clearance Level: Secret Employee Status: Regular Posting Date May 17, 2017 Description CSRA is looking for qualified Cyber Security Incident Handlers to join our team. The Cyber Security Incident Handler supports a Civilian Agency Cyber Security Operations Center (SOC) organization protecting the network security of tens of thousands of users. The work site is located in Leesburg, Virginia.

The Cyber Security Incident Handler ensures system security needs are established and maintained for operations development, security requirements definition, security risk assessment, systems analysis, systems design, security test and evaluation, certification and accreditation, systems hardening, vulnerability testing and scanning, incident response, disaster recovery, and business continuity planning and provides analytical support for security policy development and analysis. Integrates new architectural features into existing infrastructures, designs cyber security architectural artifacts, provides architectural analysis of cyber security features and relates existing system to future needs and trends, embeds advanced forensic tools and techniques for attack reconstruction, provides engineering recommendations, and resolves integration and testing issues. May interface with external entities including law enforcement, intelligence and other government organizations and agencies. The Cyber Security Incident Handler responsibilities include: •Receive, document, and report cyber security events.

• Categorize incidents and implement corresponding escalation procedures. •Communicate and coordinate incident response efforts. •Conduct daily operational update meetings for SOC staff and unscheduled situational update briefings for FAA leaders. •Analyze reports to understand threat campaign(s) techniques, lateral movements and extract indicators of compromise (IOCs).
• Provide telephone, e-mail and ticket service to customers. •Reference applicable departmental and operating administration policies in work products •Access, secure and inspect local classified information processing areas. Qualifications Required Education and Experience: Education: •Bachelor’s degree in Computer Science or Information systems. OR •Minimum six (6) years of relevant professional experience.

Experience: •In addition to required education or equivalent experience; – Minimum four (4) years IT experience AND •Must have with at least one year of network security experience. Preferred Experience: •Experience with intrusion detection systems and threat techniques. (Lateral Movement, Rootkits & Toolkits. •Experience working in a network security environment, such as a Security Operations Center (SOC), Computer Emergency Response Team (CERT), Computer Incident Response Team (CIRT), Computer Incident Response Center (CIRC) or Cyber Security Incident Response Center (CSIRC).

• Experience with business process reengineering, capability maturity model, change management, or process improvement. •Exceptional writing and documentation skills. •You will maintain twenty four (24) hours a day, seven (7) days a week, three hundred sixty five (365) days per year, incident handling capability. •You must be a proven team player with excellent oral and written communications skills.
• You must be capable of working on projects independently. Frequent interaction with government client is required. •You must have previous experience working in a network security incident response team, such as a Security Operations Center (SOC), Computer Emergency Response Team (CERT), Computer Incident Response Team (CIRT), Computer Incident Response Center (CIRC) or Cyber Security Incident Response Center (CSIRC). Infrequent (< 5%) local travel, infrequent (< 5%) long distance travel.

CSRA is committed to creating a diverse environment and is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.