Назад
Company hidden
10 дней назад

Subject Matter Expert - Edge Device Technologies (Cybersecurity)

Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Subject Matter Expert - Edge Device Technologies (Cybersecurity): Supporting federal hunt and incident response missions by analyzing network traffic, edge-device configurations, logs, and forensic data with an accent on Cisco, Ivanti, Palo Alto, Ciena, and Juniper technologies. Focus on reconstructing network-centric attacks, directing containment and remediation, validating device integrity, and integrating new network forensic capabilities.

Location: Arlington, VA, United States; includes onsite and remote incident-response engagements

Company

hirify.global is a small-business IT and cybersecurity consulting company serving federal, state, and local agencies with information technology, information assurance, SOA, big data management, and program management services.

What you will do

  • Serve as a hunt and incident response subject matter expert for network-centric and edge-device compromises.
  • Analyze PCAP, flow records, DNS and proxy logs, device configurations, telemetry, and network topologies to detect, scope, and reconstruct intrusions.
  • Evaluate and integrate new network forensic and monitoring capabilities and provide technical direction on complex response missions.
  • Recommend and support containment, eradication, segmentation, policy, firewall, IPS, ACL, and device-hardening actions.
  • Coordinate preliminary investigations, communicate findings to customers and leadership, and support onsite and remote engagements.
  • Preserve evidence integrity and produce CND guidance, technical reports, executive summaries, and standardized incident-handling procedures.

Requirements

  • U.S. Citizenship, active TS/SCI clearance, and ability to obtain DHS Suitability.
  • 10+ years of directly relevant experience, including 3+ years evaluating and implementing cyber-response or network-forensic capabilities.
  • Hands-on incident response or network-operations experience with enterprise edge devices from at least two of Cisco, Ivanti, Palo Alto, Ciena, and Juniper.
  • Strong knowledge of network architecture and security, including routing, switching, VPNs, firewalls, segmentation, and defense in depth.
  • Knowledge of CND policies, procedures, and regulations relevant to U.S. government or similar environments.
  • Ability to analyze network traffic and metadata, reconstruct malicious activity, identify attack stages, and translate findings into actionable recommendations.
  • Experience with operational incident response covering scoping, containment, eradication, and recovery.
  • Proficiency with Linux/Unix and Windows, independent decision-making under pressure, collaboration across distributed teams, and communication with technical and non-technical stakeholders.
  • Ability to rapidly configure network TAPs, packet brokers, SPAN ports, and managed or unmanaged switches without disrupting production or air-gapped traffic.
  • BS in Computer Science, Cyber Security, Computer Engineering, or a related field; alternatively, a high school diploma with 22+ years of technical experience in the area of expertise.

Nice to have

  • Leadership and mentoring experience in incident response, network operations, or security engineering.
  • Large-enterprise or service-provider network and systems administration experience.
  • Knowledge of adversarial TTPs, MITRE ATT&CK, zero trust, defense in depth, device integrity verification, and network or edge-device architecture.
  • Experience with intrusion detection, event correlation, SIEM, beaconing, C2, data-exfiltration analysis, IAM, and enterprise architecture reviews.
  • Field diagnostics and cyber-forensics experience, including protocol parsers such as Modbus, DNP3, and OPC UA, vulnerability scanning, and line-rate packet capture.
  • Experience packing and transporting ruggedized analysis cases within standard weight and carry-on or air-transport limits.
  • One or more IASAE II, CSSP Analyst, GCIA, GCIH, CSSP Incident Responder, or CEH certifications; SANS GIAC GCIA or GNFA is preferred for network forensics, and SANS GRID, GICSP, or GCIP is a plus.
  • Vendor certifications such as CCNA, CCNP Security, CCNP Enterprise, PCNSE, JNCIS/JNCIP, or equivalent Palo Alto, Juniper, Ciena, or Ivanti certifications.

Culture & Benefits

  • Full-time role supporting a federal cyber hunt and incident response mission.
  • Work includes onsite customer engagements, remote response activities, and collaboration across physical locations.
  • 95% employer-paid employee medical, dental, and vision coverage.
  • Employer-paid employee life, short-term disability, and long-term disability coverage.
  • 401(k) with company match, dependent and healthcare FSA, 11 standard holidays, and three weeks of annual leave.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →