Senior Cyberspace Planner TS/SCI

About the role

As a Technical Consultant: Threat Detection Response & Intelligence, you play a vital role in safeguarding an organization's digital infrastructure by identifying, analyzing, and mitigating cyber threats. This position involves leveraging industry frameworks and a range of cybersecurity tools to monitor, prioritize, investigate, and respond to security incidents.

Responsibilities

• Investigate security incidents using various cybersecurity tools, including SIEM, SOAR, EDR, and XDR platforms, to identify and analyze potential threats.
• Apply industry frameworks like MITRE ATT&CK and the Cyber Kill Chain to understand and counter adversary tactics effectively.
• Develop and manage incident reports, providing actionable recommendations and responses to strengthen clients' security posture.
• Collaborate with clients to implement measures that prevent future incidents.
• Interpret security tools and logs from Windows, MAC, and Linux systems to identify potential security threats.
• Develop a deep understanding of network and endpoint events to inform incident response strategies.
• Participate in vulnerability management activities to identify and address potential security vulnerabilities.
• Stay up-to-date with emerging threats and evolving technologies to anticipate potential threats.
• Gather and analyze cyber threat intelligence to inform incident response strategies and improve clients' overall security posture.

Requirements

• Onsite Fort Meade, MD 5 days a week
• Bachelor's Degree (preferred education)

Required technical and professional expertise

• Experience with Cybersecurity Tools: Proficiency in using various cybersecurity tools, including SIEM, SOAR, EDR, and XDR platforms, to monitor, prioritize, investigate, and respond to security incidents.
• Industry Frameworks Application: Experience with industry frameworks like MITRE ATT&CK and the Cyber Kill Chain to understand and counter adversary tactics effectively.
• Network and Endpoint Analysis: Ability to interpret security tools and logs from Windows, MAC, and Linux systems to identify potential security threats.
• Vulnerability Management: Experience with vulnerability management activities to identify and address potential security vulnerabilities.
• Cyber Threat Intelligence: Knowledge of gathering and analyzing cyber threat intelligence to inform incident response strategies and improve clients' overall security posture.
• Prior Government Cyber Operational Planning Experience: Experience working in a high OPTEMO environment within the government with demonstrated expertise planning full spectrum cyber operations and mission effects.

Preferred qualifications

• Deep Understanding of Emerging Threats: Experience with staying up-to-date with emerging threats and evolving technologies to anticipate potential threats and improve clients' overall security posture.
• Advanced Cybersecurity Tool Expertise: Exposure to a wide range of cybersecurity tools and technologies, enabling the development of innovative solutions to complex security challenges.
• Continuous Learning and Adaptation: Experience with continuous learning and adaptation in the field of cybersecurity, allowing for effective response to new threats and technologies.