Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
ЗП не указанаразвернуть
На похожих ролях по рынку
$150к$158кмедиана$175к
50 в выборке
82
Хорошая вакансия
развернуть
Роль четко определена и предполагает серьезную ответственность за реагирование на инциденты, но требования к допуску и опыту сильно сужают круг тех, кому она доступна.
Высокий порог входа
Понятная роль
Сильный соцпакет
Современные технологии
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Subject Matter Expert - Edge Device Technologies (Cybersecurity): Supporting federal hunt and incident response missions by analyzing network traffic, edge-device configurations, logs, and forensic data with an accent on Cisco, Ivanti, Palo Alto, Ciena, and Juniper technologies. Focus on reconstructing network-centric attacks, directing containment and remediation, validating device integrity, and integrating new network forensic capabilities.
Location: Arlington, VA, United States; includes onsite and remote incident-response engagements
Company
hirify.global is a small-business IT and cybersecurity consulting company serving federal, state, and local agencies with information technology, information assurance, SOA, big data management, and program management services.
What you will do
Serve as a hunt and incident response subject matter expert for network-centric and edge-device compromises.
Analyze PCAP, flow records, DNS and proxy logs, device configurations, telemetry, and network topologies to detect, scope, and reconstruct intrusions.
Evaluate and integrate new network forensic and monitoring capabilities and provide technical direction on complex response missions.
Recommend and support containment, eradication, segmentation, policy, firewall, IPS, ACL, and device-hardening actions.
Coordinate preliminary investigations, communicate findings to customers and leadership, and support onsite and remote engagements.
Preserve evidence integrity and produce CND guidance, technical reports, executive summaries, and standardized incident-handling procedures.
Requirements
U.S. Citizenship, active TS/SCI clearance, and ability to obtain DHS Suitability.
10+ years of directly relevant experience, including 3+ years evaluating and implementing cyber-response or network-forensic capabilities.
Hands-on incident response or network-operations experience with enterprise edge devices from at least two of Cisco, Ivanti, Palo Alto, Ciena, and Juniper.
Strong knowledge of network architecture and security, including routing, switching, VPNs, firewalls, segmentation, and defense in depth.
Knowledge of CND policies, procedures, and regulations relevant to U.S. government or similar environments.
Ability to analyze network traffic and metadata, reconstruct malicious activity, identify attack stages, and translate findings into actionable recommendations.
Experience with operational incident response covering scoping, containment, eradication, and recovery.
Proficiency with Linux/Unix and Windows, independent decision-making under pressure, collaboration across distributed teams, and communication with technical and non-technical stakeholders.
Ability to rapidly configure network TAPs, packet brokers, SPAN ports, and managed or unmanaged switches without disrupting production or air-gapped traffic.
BS in Computer Science, Cyber Security, Computer Engineering, or a related field; alternatively, a high school diploma with 22+ years of technical experience in the area of expertise.
Nice to have
Leadership and mentoring experience in incident response, network operations, or security engineering.
Large-enterprise or service-provider network and systems administration experience.
Knowledge of adversarial TTPs, MITRE ATT&CK, zero trust, defense in depth, device integrity verification, and network or edge-device architecture.
Experience with intrusion detection, event correlation, SIEM, beaconing, C2, data-exfiltration analysis, IAM, and enterprise architecture reviews.
Field diagnostics and cyber-forensics experience, including protocol parsers such as Modbus, DNP3, and OPC UA, vulnerability scanning, and line-rate packet capture.
Experience packing and transporting ruggedized analysis cases within standard weight and carry-on or air-transport limits.
One or more IASAE II, CSSP Analyst, GCIA, GCIH, CSSP Incident Responder, or CEH certifications; SANS GIAC GCIA or GNFA is preferred for network forensics, and SANS GRID, GICSP, or GCIP is a plus.
Vendor certifications such as CCNA, CCNP Security, CCNP Enterprise, PCNSE, JNCIS/JNCIP, or equivalent Palo Alto, Juniper, Ciena, or Ivanti certifications.
Culture & Benefits
Full-time role supporting a federal cyber hunt and incident response mission.
Work includes onsite customer engagements, remote response activities, and collaboration across physical locations.
95% employer-paid employee medical, dental, and vision coverage.
Employer-paid employee life, short-term disability, and long-term disability coverage.
401(k) with company match, dependent and healthcare FSA, 11 standard holidays, and three weeks of annual leave.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →