Cybersecurity Incident Responder

Cybersecurity Incident Responder

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: Top Secret

Employee Type: Regular

Percentage of Travel Required: None

Type of Travel: None

* * *

Program Overview:

The CDM Program is managed within the DHS Cybersecurity and Infrastructure Security Agency, CISA/Office of Cybersecurity and Communications (CS&C)/Network Security Deployment (NSD) Division, responsible for enhancing the security, resilience, and reliability of the Nation’s cyber and communications infrastructure. The DHS CDM Program mission is to safeguard and secure cyberspace in an environment where the threat of cyber-attack is continuously growing and evolving. The CDM Program defends the United States (U.S.) Federal Information Technology (IT) networks from cybersecurity threats by providing continuous monitoring sensors (tools), diagnosis, mitigation tools, and associated services to strengthen the security posture of Government networks.

What You’ll Get to Do:

• Work with the USCG Cyber Command, and/or any other pertinent parties (to include external vendors) at any USCG location to recover from any incident. 
• Hands-on involvement in gathering artifacts or recovering systems. 
• For any incident requiring a response team to be deployed shall be able to deploy within 72 hours of notification. On instances where it is not possible to deploy, support will usually be done via phone and email, or, in rarer cases, remote system access. 
• Coordinate with external service providers, USCG system owners, system administrators, and Information System Security Officers (ISSOs), as appropriate. 
• Maintain a set of Government furnished portable vulnerability assessment, digital media analysis, and malware analysis tools to support deployment missions, to be used for critical incident response efforts and in response to high priority initiatives determined by USCG Cyber Command leadership. 
• Contribute to Incident Assessment and Response Report deliverable. 

You’ll Bring These Qualifications:

• Relevant Years of Experience: 7+
• Education: BA/BS or equivalent years of relevant experience
• Certifications: IAT III, CND and CSSP-IR
• Qualifications, Skills, & Expertise: 
• Subject matter expertise in at least one of the following areas: Cyber Threat Hunting, Malware Analysis & Reverse Engineering, Cyber Threat Intelligence, Digital Forensics & Incident Response.
• Previous experience working in a Cyber Security Operations Center
• Experience with using a SIEM platform.
• Experience with using a scripting language such as Python or PowerShell for task automation or tool creation is desirable.
• Demonstrable knowledge of several of the following areas: cybersecurity concepts, network protocols, firewalls, IDS/IPS systems, email security, endpoint security, network security, Windows/Linux/macOS systems, cyber threat hunting, malware analysis tools and techniques, cyber threat intelligence, common threat actor TTPs, application security concepts, cloud security fundamentals.
• Knowledge of incident response and handling methodologies.
•  Knowledge of the NCCIC National Cyber Incident Scoring System to be able to prioritize triaging of incident.
• Knowledge of general attack stages and skilled in recognizing and categorizing types of vulnerabilities and associated attacks.

What We Can Offer You:

- We’ve been named a Best Place to Work by the Washington Post.

- Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives.

- We offer competitive benefits and learning and development opportunities.

- We are mission-oriented and ever vigilant in aligning our solutions with the nation’s highest priorities.

- For over 60 years, the principles of CACI’s unique, character-based culture have been the driving force behind our success.

-

______________________________________________________________________________

What You Can Expect:

 

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

 

An environment of trust.

CACI takes pride in fostering a diverse and accessible culture where every individual feels supported to chart their own path. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

 

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

 

Your potential is limitless. So is ours.

Learn more about CACI here.

______________________________________________________________________________

Pay Range: There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits. Learn more here.

The proposed salary range for this position is:

$94,400 - $198,300

CACI is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, age, national origin, disability, status as a protected veteran, or any other protected characteristic.