Action Officer (Cybersecurity)

TL;DR

Action Officer (Cybersecurity): Supporting the management of cyber incidents through the incident response lifecycle with an accent on reporting, coordination, threat and vulnerability management. Focus on triaging incidents using NCCIC scoring, drafting operation summaries, and maintaining knowledge objects with MITRE ATT&CK framework.

Location: Onsite in Arlington, VA. U.S. Citizenship and active TS/SCI clearance required. Must be able to obtain DHS Suitability.

Company

Provider of advanced cyber, data operations, systems integration, and intelligence mission support services to U.S. government customers in intelligence, defense, civil, and commercial markets.

What you will do

• Manage cyber incidents through the full incident response lifecycle, including creating routine reporting in case management and ticketing systems.
• Coordinate with internal/external customers, partners, and stakeholders to ingest, validate, and evaluate information for optimal response actions.
• Update and track cases/tickets accurately and draft summaries with oral presentations for leadership.
• Perform threat and vulnerability management, recognizing threat actors, vulnerabilities, and attacks using MITRE ATT&CK.
• Apply knowledge of network security monitoring, system administration, cyber hygiene, and cybersecurity policies.

Requirements

• U.S. Citizenship, active TS/SCI clearance, and ability to obtain DHS Suitability
• 5+ years of directly relevant experience in cyber incident management or cybersecurity operations
• Knowledge of incident response, threat hunting, NCCIC National Cyber Incident Scoring System, attack stages, and threat actor TTPs
• Familiarity with system/network administration, traffic analysis, and Computer Network Defense policies
• BS in Incident Management, Operations Management, Cybersecurity or related (or HS Diploma with 7-9 years experience)
• Excellent oral and written communication skills

Nice to have

• GCIH certification
• Familiarity with system/application security threats and attack methods

Culture & Benefits

• Collaborative team environment with talented individuals focused on innovation and solving complex problems.
• Opportunity to work on mission-critical U.S. government initiatives in cybersecurity and intelligence.
• Equal Opportunity Employer committed to diversity and inclusion.