Incident Response Analyst

Company: SAIC
Location: Fort Bragg
Posted on: January 15, 2022

Job Description:

DescriptionSAIC is seeking an--Incident Response Analyst with an active TS/SCI (CI or FS Polygraph a plus) to work onsite with our customer at Fort Bragg, NC.The CND Analyst shall identify, collect, and analyze network and host data, and report events or incidents that occur or might occur within a network to mitigate immediate and potential network and host threats.The individual shall perform computer network defense (CND) incident triage, to include:

• Determining urgency, and potential impact;
• Identifying the specific vulnerability; and making recommendations that enable expeditious remediation;
• Perform initial, forensically sound collection of images and inspect to determine mitigation/remediation on enterprise systems;
• Perform real-time computer network defense (CND) incident handling (e. g., forensic collection, intrusion correlation/tracking, threat analysis, and direct system remediation) task to support Incident Response Teams, receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts, and track and document computer network defense (CND) incidents from initial detection through final resolution;
• Employ defense-in-depth principles and practices, collect intrusion artifacts (e.g., source code, malware, and Trojans) and use discovered data to enable mitigation of potential computer network defense (CND) incidents within the enterprise;--
• Assist with analysis of actions taken by malicious actors to determine initial infection vectors, establish a timeline of activity and any data loss associated with incidents;
• Provide expert technical support to enterprise-wide CND technicians to document CND incidents, correlate incident data to identify specific vulnerabilities and to make recommendations enabling remediation;
• Ideal candidate would have scripting experience such as Python and PowerShell.----QualificationsRequired education and experience:
  • Bachelors and 5+ years or more experience; four (4) years or more experience accepted in lieu of degree.Required skills:
    • Must have Incident Response experience.Required certification:
      • Must obtain an IAT Level III within six (6) months of hire.Required clearance:
        • Must have a TS/SCI and be able to obtain a TS/SCI w/CI poly (FS polygraph is acceptable.)Desired Skills:
          • Scripting experience such as Python & PowerShell. Additional experience in writing code is highly desirable.
          • Expertise with the SOCOM Enterprise is highly desirable.
          • IAT Level III certification (CISSP, CASP+ CE, GCED, GCIH, CISA, CCNP Security).
          • OSCP and/or OSCE.--COVID Policy: Prospective and/or new employees are required to adhere with SAIC's vaccination policy. All SAIC employees must be fully vaccinated and they must submit proof of vaccination on their first day of employment. Prospective or new employees may seek an exemption to the vaccination requirement at Contact Us and must have an approved exemption prior to the start of their employment. Where work is performed strictly at a customer site, customer site vaccination requirements preempt SAIC's vaccination policy.
            

Keywords: SAIC, Fayetteville , Incident Response Analyst, Professions , Fort Bragg, North Carolina