Cybersecurity Incident Manager Day (Day Shift)

Triangle Cyber is seeking a Cybersecurity Incident Manager (Day Shift) to provide onsite incident management support for a large federal client.

What You’ll Do

• Perform Computer Network Defense (CND) incident triage to include determining scope, urgency, and potential impact.
• Correlate incident data to identify specific trends in reported incidents.
• Recommend defense‑in‑depth principles and practices (e.g., Defense in Multiple Places, layered defenses, security robustness).
• Research and compile known resolution steps or workarounds to enable mitigation of potential CND incidents within the enterprise.
• Apply cybersecurity concepts to the detection and defense of intrusions into small and large‑scale IT networks, and conduct cursory analysis of log data.
• Monitor external data sources to maintain currency of CND threat conditions and determine which security issues may impact the enterprise.

Requirements

• Active Top Secret clearance.
• At least five (5+) years of directly relevant experience in cyber incident management or cybersecurity operations.
• Bachelor of Science (or higher) in Computer Science, Cybersecurity, Information Technology, or a related field, or a High School Diploma with at least four (4) years of hands‑on incident management or cybersecurity experience.
• Residency within 60 miles of Arlington, VA, and willingness to work onsite, Monday through Friday (Day Shift).
• Knowledge of incident response and handling methodologies.
• Knowledge of NIST 800‑62 (latest revision) and FISMA standards as they pertain to reporting incidents.
• Knowledge of the National Cyber Incident Scoring System to prioritize triaging of incidents.
• Understanding of general attack stages (e.g., footprinting and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks, etc.).
• Skill in recognizing and categorizing types of vulnerabilities and associated attacks.
• Knowledge of basic system administration and operating system hardening techniques, Computer Network Defense policies, procedures, and regulations.
• Knowledge of different operational threat environments (first generation [script kiddies], second generation [non‑nation‑state sponsored], third generation [nation‑state sponsored]).
• Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross‑site scripting, PL/SQL and injections, race conditions, covert channel, replay, return‑oriented attacks, malicious code).

Preferred Qualifications

• GIAC Certified Incident Handler (GCIH).
• GIAC Certified Forensic Analyst (GCFA).
• GIAC Information Security Professional (GISP).
• GIAC Certified Enterprise Defender (GCED).
• (ISC)² Certified Cyber Forensics Professional (CCFP) – retired.
• (ISC)² Certified Information Systems Security Professional (CISSP).

Schedule

On‑site, Monday through Friday, Day Shift.