Cyber Security Incident Response Engineer

📋 Description

• Triage incidents: detection, analysis, coordination, response.
• Work with firewalls, IDS/IPS, web proxy, antivirus, SIEM, and scanners.
• Research and analyze data sources for new trends with the SOC team.
• Troubleshoot issues with customer policies and controls.
• Perform on-demand vulnerability scanning and compliance monitoring.
• Identify network and OS vulnerabilities and recommend countermeasures.

🎯 Requirements

• 5+ years in cybersecurity incident handling in Federal govt SOC.
• Familiarity with OMB and FISMA mandates for InfoSec.
• Deep understanding of NIST SP 800-61, 800-37, 800-53, 800-137.
• Knowledge of security policy standards, secure design reviews, multi-tier networking.
• Familiarity with SOC tools: SIEM, Tenable, ForeScout, App Detective, Fortify.
• Excellent oral and written communication skills.