Description
Summary:
The Cyber Incident Response Analyst supports 24x7x365 cybersecurity operations, focusing on incident detection, analysis, response, mitigation, and threat intelligence.
Highlights:
1. Engage in incident detection, analysis, and investigation
2. Contribute to threat intelligence and vulnerability management
3. Support critical 24x7x365 cybersecurity operations
Apply Now
MANTECH seeks a motivated, career and customer-oriented Cyber Incident Response Analyst to join our team in McLean, Virginia. Our team provides 24x7x365 cybersecurity support to one of the most coveted targets in the world.
The Cyber Incident Response Analyst will work a 4-day work week; 10 hours per shift. Staff will be assigned to either Sun-Wed or Wed-Sat. The schedule is fixed and does not rotate. We have openings on 1st, 2nd and 3rd shifts. Shift differential applies to 2nd and 3rd shifts. Candidates must be able to train on day shift for 6 months.
Responsibilities include but are not limited to:
Incident Detection and Monitoring
Incident Analysis and Investigation
Incident Response and Mitigation
Threat Intelligence and Vulnerability Management
Reporting and Documentation
Minimum Qualifications:
High School Diploma and 3+ years' experience in cyber security
2+ years’ experience with incident response
Knowledge of cybersecurity principles, incident detection, analysis, and response methodologies.
Knowledge of operating systems, network protocols, and security technologies
Knowledge of threat intelligence, vulnerability management, and security incident response best practices
Ability to obtain a DoD 8570 IAT-II certification within 6 months of hire
Preferred Qualifications:
Bachelor's degree in technical field
Relevant certifications including GIAC Certified Incident Handler (GCIH), Certified Incident Response Handler (GCFA) or similar
Experience with using SIEM systems, network security tools, and log analysis tools
Experience with MITRE ATT&CK framework
Experience with threat intelligence, vulnerability management, and security incident response
Clearance Requirements:
Current/active TS/SCI w/Polygraph is required
Physical Requirements:
The person in this position must be able to remain in a stationary position 50% of the time
Apply Now