Cybersecurity Incident Response Team (CIRT) Incident Response Analyst - Mark Center, VA

Cybersecurity Incident Response Team (CIRT) Incident Response Analyst - Mark Center, VAAlexandria, VA, USA ? Washington, DC, USA Req #478Wednesday, December 11, 2024ASRC Federal NetCentric Technology seeks a Cybersecurity Incident Response Team (CIRT) Analyst in Alexandria, Virginia to support our Cybersecurity Support Services contract with the Defense Manpower Data Center (DMDC). This position performs activities related to the Cyber Incident Response Team (CIRT), the team responsible for containing, responding to, and eradicating threats and other malicious activity. This position helps build and improve cybersecurity incident response capabilities and coordinate or participate in high-priority investigations, identifying incident response improvements, and preparing reports for management.Responsibilities:- Lead and coordinate the organization's response to cyber incidents, ensuring rapid identification, containment, and resolution.- Perform technical incident response investigations into cybersecurity related events and incidents.- Determine the nature, scope, and cause of incidents including root cause analysis.- Act as the primary point of contact for all major security incidents, managing communication with stakeholders, including senior leadership, mission owners, and external partners.- Identify corrective actions and aid in the containment, eradication, and recovery of a given event and incident.- Track incident response, corrective measures taken, recommendations, and remediation activities; complete incident reports for investigations as needed; provide or contribute to weekly report of events and incidents.- Oversee real-time monitoring of security events, and lead the analysis and investigation of potential breaches, threats, and vulnerabilities.- Create and maintain incident response SOP in accordance with CJCSM 6510.01B, NIST SP 800-61R2, DoD regulations, and industry best practices.- Ensure thorough post-incident analysis to derive lessons learned, identifying gaps and implementing preventive measures.- Ensure proper monitoring and logging across the network infrastructure and endpoints to detect and respond to cyber incidents promptly.- Provide expert guidance on compliance with cybersecurity directives, ensuring the DoD program meets all required security controls and risk management policies.- Provide regular reports to program leadership, DoD officials, and other stakeholders on the status of security incidents, lessons learned, and the effectiveness of response strategies.- Lead the continuous improvement of incident response capabilities by identifying areas of weakness, recommending enhancements, and implementing new technologies and processes.- Respond to and investigate cyber events should an incident occur after regular business hours.Requirements:- Active DoD Secret clearance with the ability to obtain and maintain a Top-Secret Clearance- Active DoD 8570 IAT Level II certification or greater , including at least one of the following certifications in good standing: CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP, CASP+CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, or CCSP.- Active DoD 8570 CSSP Incident Responder certification a plus, including at least one of the following certifications in good standing: CEH, CFR, CCNA Cyber Ops, CHFI, CySA+, GCFA, GCIH, SCYBER, or PenTest+ Knowledge of Incident Response Handling Procedures (NIST SP 800-61)- Familiarity with cyber adversary tactics and frameworks (such as ATT&CK and D3FEND)- Bachelor's Degree in computer science or related field- 7+ years in Information Technology or Information Security- 3+ years in Cybersecurity Incident Response- CIRT lead experience a plusAdvantages of Working at ASRC Federal:- Learning and Development: After 90 days of employment, regular full-time employees are eligible for our professional development program. This includes annual funding for:- Pursuing Associate's, Bachelor's, or Graduate Degrees.- Obtaining industry-standard professional certifications.- Participating in professional certificate programs.- Covering registration fees for professional conferences.- Employee Resource Groups (ERGs): Engage with colleagues through our ERGs, which foster networking and collaboration among individuals with shared interests, backgrounds, and experiences. Our ERGs include:- Women's Impact Network (WIN).- Multicultural ERG.- Military Community (MILCOM).- Pride ERG for LGBTQ+ employees and allies.- Purpose-Driven Careers: Join a company recognized as a:- Certified Great Place to Work .- Military Times' Best for Vets Employer.- Military.com's Top 25 Veteran Employer .Comprehensive Benefits:- Insurance Coverage : Comprehensive plans for medical, dental, vision, life insurance, and short-term/long-term disability.- Paid Leave : Inclusive policies for bereavement, military obligations, and parental needs, along with 11 paid holidays annually.- Retirement Savings : A 401(k) plan with a generous company match and immediate vesting to help secure your financial future.- Incentives : Employee referral bonuses to reward you for helping grow the ASRC Federal FamilyEmbark on a career with ASRC Federal, where your growth, purpose, and well-being are at the forefront of what we do.We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law.EEO StatementASRC Federal and its Subsidiaries are Equal Opportunity /Affirmative Action employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.Other details- Job FamilyInformation Technology- Job Sub-FamilyInformation Security- Pay TypeSalary- Required EducationBachelor's Degree- Alexandria, VA, USA- Washington, DC, USA