Cyber Security Operations Specialist III - Tier 3

Responsibilities

• Cybersecurity incident response, including containment, eradication, and recovery measures.
• Malware and implant analysis, and forensic artifact handling and analysis.
• Continuous exercises and dry runs to improve response outcomes.
• Coordination with SI Office of Counterintelligence (SIC), Insider Threat Office (SIII), and other law enforcement and counterintelligence personnel.
• Production of security incident reports, categorization of incidents and events.
• De-conflicting blue/red team activity with open incidents/events.
• Reporting and recovery from incidents/events.
• Building timelines, documenting, briefing, and reporting incident response actions and analysis.
• Generating and updating reports in JIMS, ICMS, and other authorized reporting systems.
• Executing custom scripts, tools, and capabilities to collect and analyze data, and respond to incidents/events.
• Performing digital media analysis on host, server, and network data.
• Developing and identifying indicators of compromise.
• Malware analysis and signature development.
• Remediation of discrepancies and recommendations for prevention.

Qualifications

• Bachelor's Degree and/or 6 years' experience in Cyber Security (CSOS).
• Active TS/SCI clearance, ability to obtain a polygraph.
• Compliant with DoDD 8140.01 and DoD 8570.01-M IAT Level II and CSSP Incident Responder.
• Input to and coordination with all applicable stakeholders for CSOC Significant Activity Report, CSOC Operations Update, and Weekly CSOC Status Report.
• Serving as C-IRT members and executing Defensive Cyberspace Operations-Internal Defensive Measures.
• Performing digital media analysis and malware reverse engineering.
• Developing and providing incident investigation reports.
• Conducting Quality Control reviews of closed CSOC Tier 2 tickets.

Desired

• Masters degree.
• IAT III certification.