Qureos Mentor

<div>ECS is seeking a System Administrator 2 to work in our Pocatello, ID office.

Overview: 
This is an exciting opportunity to support one of the world's premier law enforcement organizations. In this role, you'll contribute directly to mission-critical operations, providing technical support to agents, analysts, and professionals combating terrorism, cyber threats, espionage, and major criminal activity.

We are looking for candidates who are detail-oriented, customer-focused, and committed to delivering high-quality technical support in a fast-paced, 24/7 environment. You'll play a vital role in supporting the technology that powers national security efforts.

About the Role: 
This position is part of a 24/7 operations team. Flexibility to work other shifts, including weekends and holidays, may be required based on mission needs. Training and additional duties may be assigned during alternate shifts as needed.

Key Responsibilities:
<ul>
<li>Support Watch Operations by monitoring system health, responding to alerts, and escalating critical issues as needed in a 24/7 operational environment</li>
<li>Install and configure software and hardware systems</li>
<li>Manage and maintain Active Directory functions (e.g., password resets, account unlocks)</li>
<li>Provide support for mobile devices and related technologies</li>
<li>Diagnose and resolve issues related to Microsoft applications</li>
<li>Monitor, manage, and optimize network servers and IT tools</li>
<li>Troubleshoot system outages and performance issues</li>
<li>Maintain system security through access controls, backups, and firewalls</li>
<li>Perform system upgrades, patches, and hardware refreshes</li>
<li>Train end users on new technologies and system features</li>
</ul>Requirements:
<ul><li>Active Top Secret clearance required, with the ability to obtain SCI and/or CI Polygraph if needed</li>
<li>1+ years of hands-on experience in system administration or related IT functions</li>
<li>Strong understanding of Windows environments and enterprise IT systems</li>
<li>Experience supporting end-users in a helpdesk or system administration role</li>
<li>Ability to work independently and as part of a collaborative team</li>
<li>Proficiency in managing databases, networks (LAN/WAN), and patch management processes</li>
<li>Solid understanding of system security principles, including intrusion detection and data backup/recovery methods</li>
<li>Scripting experience in Python, Perl, or similar programming languages</li>
<li>Familiarity with multiple operating systems and platforms</li>
<li>Strong analytical and troubleshooting skills</li>
<li>High attention to detail and accuracy, particularly in documentation</li>
<li>Previous experience delivering technical support in a professional or business environment</li>
<li>Excellent interpersonal and communication skills</li>
<li>Basic knowledge of IT Service Management (ITSM) frameworks and best practices</li>
<li>Willingness and availability to work in a 24/7 operational environment, including shifts, weekends, and holidays</li>
<li>Active CompTIA certifications or higher (e.g., CISSP, CASP+)</li>
</ul>
 
Req Benefits:
<div>https://ecstech.com/careers/benefits/&quot;&gt;https://ecstech.com/careers/benefits/</div></div>

Systems Administrator 2

<div>ECS is seeking a Senior Security Engineer to work in our Suitland, MD office.
ECS Federal is a leading information security and information technology company in Washington, DC. We are looking to hire a Senior Security Engineer to support a full range of cyber security services on a long-term contract in Washington DC. The position is full time/permanent and will support a US Government civilian agency. The position is available immediately upon finding a qualified candidate with the appropriate background clearance.

<h1 class="jobSectionHeader">Position Responsibilities:</h1>
<ul><li>Design and develop cybersecurity or cybersecurity-enabled</li>
<li>Design hardware, operating systems, and software applications to adequately address cybersecurity</li>
<li>Design or integrate appropriate data backup capabilities into overall system designs and ensure that appropriate technical and procedural processes exist for secure system backups and protected storage of backup data.</li>
<li>Develop and direct system testing and validation procedures and documentation</li>
<li>Develop detailed security design documentation for component and interface specifications to support system design and development.</li>
<li>Develop Disaster Recovery and Continuity of Operations plans for systems under development and ensure testing prior to systems entering a production environment.</li>
<li>Develop specific cybersecurity countermeasures and risk mitigation strategies for systems and/or</li>
<li>Identify and direct the remediation of technical problems encountered during testing and implementation of new systems (e.g., identify and find workarounds for communication protocols that are not interoperable).</li>
<li>Identify and prioritize essential system functions or sub-systems required to support essential capabilities or business functions for restoration or recovery after a system failure or during a system recovery event based on overall system requirements for continuity and availability.</li>
<li>Identify, assess, and recommend cybersecurity or cybersecurity-enabled products for use within a system and ensure that recommended products are in compliance with organization's evaluation and validation requirements.</li>
<li>Implement security designs for new or existing system(s).</li>
<li>Incorporate cybersecurity vulnerability solutions into system designs (e.g., Cybersecurity Vulnerability Alerts).</li>
<li>Perform risk analysis (e.g., threat, vulnerability, and probability of occurrence) whenever an application or system undergoes a major change.</li>
<li>Design, implement, test, and evaluate secure interfaces between information systems, physical systems, and/or embedded technologies.</li>
<li>Design, develop, integrate, and update system security measures that provide confidentiality, integrity, availability, authentication, and non-repudiation.</li>
<li>Design to security requirements to ensure requirements are met for all systems and/or applications.</li>
<li>Develop mitigation strategies to address cost, schedule, performance, and security risks.</li>
<li>Perform security reviews and identify security gaps in architecture.
</li><li>Trace system requirements to design components and perform gap analysis.</li>
<li>Verify stability, interoperability, portability, and/or scalability of system architecture.</li>
</ul>
Salary Range: $156,000 - $180,000

General Description of Benefits
Requirements:
<ul><li>Strong written and verbal communication</li>
<li>Knowledge of secure configuration management (e.g., Security Technical Implementation Guides (STIGs), cybersecurity best practices on cisecurity.org).</li>
<li>Knowledge of software development models (e.g., Waterfall Model, Spiral Model).</li>
<li>Knowledge of DevSecOps and software engineering</li>
<li>Knowledge of structured analysis principles and methods.</li>
<li>Experience designing architectures and frameworks.</li>
<li>Knowledge of system design tools, methods, and techniques, including automated systems analysis and design tools.</li>
<li>Knowledge of the systems engineering process.</li>
<li>Knowledge of Supply Chain Risk Management Practices (NIST SP 800-161)</li>
<li>Knowledge of critical infrastructure systems with information communication technology that were designed without system security considerations.</li>
<li>Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).</li>
<li>Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.</li>
</ul><h1 class="jobSectionHeader">Certifications/Licenses:</h1>
<ul><li>Bachelor's degree or higher</li>
<li>10+ years' experience in security engineering in mid to large environments</li>
<li>Certifications addressing security and risk management, asset security, security engineering, communications and network security, identity and access management, security assessment and testing, security operations, software development security, system security, network infrastructure, access control, cryptography, assessments and audits, and organizational security</li>
<li>Active Public Trust clearance.</li>
</ul>
 
Req Benefits:
<div>https://ecstech.com/careers/benefits/&quot;&gt;https://ecstech.com/careers/benefits/</div></div>

Senior Security Engineer

<div><div>ECS is seeking a Senior Business Analyst to work in our Arlington, VA office. Please Note: This position is contingent upon additional funding.</div>

Responsibilities include:
<ul>
<li>Develop new business strategies and models</li>
<li>Communicate to management on how these strategies and models will enhance business efficiency</li>
<li>Create monthly reports on the performance of the business</li>
<li>Identify and address operational, financial, and technological risks within the business</li>
<li>Maintain, test, and improve business and systems operations</li>
<li>Build and maintain relationships with key stakeholders</li>
<li>Identify innovative ways to increase customer satisfaction</li>
<li>Evaluate the performance of project teams to ensure that targets and deadlines are met</li>
<li>Communicate ideas and viewpoints to senior management</li>
<li>Act as a liaison between business and IT groups</li>
<li>Supervise the design of new products and evaluate how these will perform on the market</li>
</ul>Requirements:
<ul><li>Bachelor's degree in business, accounting, IT or any related field</li>
<li>3+ years' experience as a business analyst</li>
<li>Knowledge of cloud environments</li>
<li>Knowledge of Databricks</li>
<li>Knowledge of Microsoft Visio and Access is advantageous</li>
<li>Ability to develop and run SQL or Python queries</li>
<li>Excellent communication skills - you have strong verbal and written interpersonal and communication skills, which are used to effectively interact with customers, collaborate with internal teams, and convey ideas and feedback</li>
<li>Analytical skills - part of the daily role includes analyzing data, feedback, and metrics to derive meaningful insights and make data-driven decisions</li>
<li>Customer service skills - you are experienced in placing the customer at the center of decision-making and continuously strive to exceed their expectations by staying on top of customer support and customer complaints, creating a powerful customer experience strategy</li>
<li>Problem-solving/analytical skills - you can identify and address customer issues, resolve conflicts, and find creative solutions to pain points</li>
<li>Adaptability - you can proactively respond to evolving customer needs, industry trends, and shifting business dynamics</li>
<li>Proven training in Business Process Modeling</li>
<li>Proficiency in MS Office (MS Word, Excel, PowerPoint)</li>
<li>The ability to handle multiple projects in a fast-paced environment</li>
<li>Project Management experience at the senior level</li>
</ul>
 
Req Benefits:
<div>https://ecstech.com/careers/benefits/&quot;&gt;https://ecstech.com/careers/benefits/</div></div>

Senior Business Analyst

<div>ECS is seeking a Security Engineer JR to work in our Windsor Mill office.
Position Responsibilities:

. Perform account maintenance (provision and revoke access to systems, follow procedures for periodic audit of users' access to systems)

. Monitor infrastructure and respond to operational alerts

. Monitor communication channels and service requests for help with system access (such as unlocking accounts and resetting passwords)

. Support other engineers in project and maintenance activities

. Initial triage of system faults, and escalation to other engineers when appropriate.

. Operate and maintain security tools.

. Maintain documentation to ensure that it is up-to-date and accurate.

. Optimizes performance by researching software and equipment.

. Use available resources to maintain and expand technical knowledge of information systems

Salary Range: $96,741.00 - $118,239.00 
General Description of Benefits: Benefits Link
Requirements:
Job Requirements:

. Competence in information system administration

. Basic Linux system administration via CLI

. Basic understanding of networking components (switches, routers, firewalls)

. Working knowledge of networking protocols (IPv4, TCP, UDP, ICMP)

. Conceptual understanding of server components (CPU, RAM, storage, network interface), and impact on performance

. Basic understanding of server virtualization

. Ability to research solutions to technical issues

. Judgement to know when to seek guidance from other engineers

. Ability to manage concurrent projects

. Good verbal and written communications skills

. Proven teamwork skills 
 
Req Benefits:
<div>https://ecstech.com/careers/benefits/&quot;&gt;https://ecstech.com/careers/benefits/</div></div>

Security Engineer Junior

<div>ECS is seeking a SOC Analyst Mid to work in our Windsor Mill office.
Position Responsibilities:

. Perform hunting for malicious activity across the network and digital assets

. Respond to computer security incidents and conduct threat analysis

. Identify and act on malicious or anomalous activity

. Conducts analysis using a variety of tools and data sets to identify indicators of malicious activity on the network

. Perform detailed investigation and response activities for potential security incidents

. Provide accurate and priority driven analysis on cyber activity/threats

. Perform payload analysis of network packets

. Recommends implementation of countermeasures or mitigating controls

. Ensures all pertinent information is obtained to allow for the identification, containment, eradication, and recovery actions to occur in a time sensitive environment

. Collaborates with technical and threat intelligence analysts to provide indications and warnings, and contributes to predictive analysis of malicious activity

. Mentor junior staff in cybersecurity techniques and processes

. Create and continuously improve standard operating procedures used by the SOC

. Resolve or coordinate the resolution of cyber security events

. Monitor incoming event queues for potential security incidents

. Create, manage, and dispatch incident tickets

. Monitor external event sources for security intelligence and actionable incidents

. Maintain incident logs with relevant activity

. Document investigation results, ensuring relevant details are passed to SOC Lead, Incident Management team and stakeholders

. Participate in root cause analysis or lessons learned sessions

Salary Range: $69,099.00 - $84,454.00 
General Description of Benefits: Benefits Link
Requirements:
Job Requirements:

. Working knowledge with US-CERT Federal Incident Notification Guidelines

. 4 years of Information Technology experience, with at least 2 years of experience in information security working within security operations

. Working knowledge of Splunk Enterprise, Enterprise Security, and SOAR products

. Working knowledge of CrowdStrike, TrendMicro and McAfee host-based solutions

. Knowledge of log, network, and system forensic investigation techniques

. Significant experience performing analysis of log files from a variety of sources, including individual host logs, network traffic logs, firewall logs, or intrusion prevention/detection logs

. Experience conducting intelligence driven defense utilizing the MITRE ATT&amp;CK framework and Cyber Kill Chain (CKC)

. Diverse knowledge base of operating systems, network protocols, system administration, and security technologies

. Knowledge of TCP/IP Networking and the OSI model

. Experience creating actionable content for a diverse range of commercial security tools and/or SIEM technologies

. Significant experience monitoring threats via SIEM console

. Excellent problem solving, critical thinking, and analytical skills with the ability to de-construct problems

. Strong customer service skills and decision-making skills

. Ability to develop working knowledge of client infrastructure

Certifications/Licenses: One or more of the following industry standard certifications:

. Bachelor's degree in Computer Science or related field or equivalent work experience

. Certified Information Systems Security Professional or Associate

. Formal IT Security/Network Certification such as SANS GIAC Certified Intrusion Analyst (GCIA), SANS GIAC Network Forensic Analyst (GNFA) or SANS GIAC Certified Incident Handler (GCIH) 
 
Req Benefits:
<div>https://ecstech.com/careers/benefits/&quot;&gt;https://ecstech.com/careers/benefits/</div></div>

SOC Analyst Mid

<div><div>ECS is seeking a SOC Analyst SR to work in our Windsor Mill office.</div>
<div>
</div><div>Position Responsibilities:
</div><ul><li>Perform hunting for malicious activity across the network and digital assets
</li></ul><ul><li>Respond to computer security incidents and conduct threat analysis
</li></ul><ul><li>Identify and act on malicious or anomalous activity
</li></ul><ul><li>Conducts analysis using a variety of tools and data sets to identify indicators of malicious activity on the network
</li></ul><ul><li>Perform detailed investigation and response activities for potential security incidents
</li></ul><ul><li>Provide accurate and priority driven analysis on cyber activity/threats
</li></ul><ul><li>Perform payload analysis of packets
</li></ul><ul><li>Recommends implementation of countermeasures or mitigating controls
</li></ul><ul><li>Ensures all pertinent information is obtained to allow for the identification, containment, eradication, and recovery actions to occur in a time sensitive environment
</li></ul><ul><li>Collaborates with technical and threat intelligence analysts to provide indications and warnings, and contributes to predictive analysis of malicious activity
</li></ul><ul><li>Develop innovative monitoring and detection solutions using client tools and other skillsets such as scripting and content development
</li></ul><ul><li>Mentor junior staff in cybersecurity techniques and processes
</li></ul><ul><li>Create and continuously improve standard operating procedures used by the SOC
</li></ul><ul><li>Resolve or coordinate the resolution of cyber security events
</li></ul><ul><li>Monitor incoming event queues for potential security incidents
</li></ul><ul><li>Create, manage, and dispatch incident tickets
</li></ul><ul><li>Monitor external event sources for security intelligence and actionable incidents
</li></ul><ul><li>Maintain incident logs with relevant activity
</li></ul><ul><li>Document investigation results, ensuring relevant details are passed to SOC Lead, Incident Management team and stakeholders
</li></ul><ul><li>Participate in root cause analysis or lessons learned sessions
</li></ul>Salary Range: $79584.00 - $97269.00 
General Description of Benefits: Benefits Link 
Requirements:
Job Requirements:
<ul><li>In-depth knowledge of the US-CERT Federal Incident Notification Guidelines
</li></ul><ul><li>6 years of Information Technology experience, with at least 4 years of experience in information security working within security operations
</li></ul><ul><li>Strong knowledge of Splunk Enterprise, Enterprise Security, and SOAR products
</li></ul><ul><li>Strong knowledge of CrowdStrike, TrendMicro and McAfee host-based solutions
</li></ul><ul><li>Career proven knowledge of log, network, and system forensic investigation techniques
</li></ul><ul><li>Significant experience performing analysis of log files from a variety of sources, to include individual host logs, network traffic logs, firewall logs, or intrusion prevention logs
</li></ul><ul><li>Significant experience with packet analysis (Wireshark) and Malware analysis preferred
</li></ul><ul><li>Intelligence driven defense utilizing the MITRE ATT&amp;CK framework and Cyber Kill Chain (CKC)
</li></ul><ul><li>Knowledge of diverse operating systems, networking protocols, systems administration and security technologies
</li></ul><ul><li>Knowledge of TCP/IP Networking and knowledge of the OSI model
</li></ul><ul><li>Experience creating actionable content for a diverse range of commercial security tools and/or SIEM technologies
</li></ul><ul><li>Significant experience monitoring threats via a SIEM console
</li></ul><ul><li>Excellent problem solving, critical thinking, and analytical skills with the ability to de-construct problems
</li></ul><ul><li>Strong customer service skills and decision-making skills
</li></ul><ul><li>Ability to develop strong knowledge of client infrastructure
</li><li><ul><li>Certified Information Systems Security Professional or Associate
</li></ul><ul><li>Formal IT Security/Network Certification such as SANS GIAC Certified Intrusion Analyst (GCIA), SANS GIAC Network Forensic Analyst (GNFA) or SANS GIAC Certified Incident Handler (GCIH)
</li></ul></li></ul> 
Req Benefits:
<div>https://ecstech.com/careers/benefits/&quot;&gt;https://ecstech.com/careers/benefits/</div></div>

SOC Analyst Sr

<div>ECS is seeking a SOC Analyst JR to work in our Windsor Mill office.
<ul><li>Perform hunting for malicious activity across the network and digital assets
</li></ul><ul><li>Respond to computer security incidents and conduct threat analysis
</li></ul><ul><li>Identify and act on malicious or anomalous activity
</li></ul><ul><li>Conducts analysis using a variety of tools and data sets to identify indicators of malicious activity on the network
</li></ul><ul><li>Perform detailed investigation and response activities for potential security incidents
</li></ul><ul><li>Provide accurate and priority driven analysis on cyber activity/threats
</li></ul><ul><li>Perform payload analysis of network packets
</li></ul><ul><li>Recommends implementation of counter-measures or mitigating controls
</li></ul><ul><li>Ensures all pertinent information is obtained to allow for the identification, containment, eradication, and recovery actions to occur in a time sensitive environment
</li></ul><ul><li>Collaborates with technical and threat intelligence analysts to provide indications and warnings, and contributes to predictive analysis of malicious activity
</li></ul><ul><li>Create and continuously improve standard operating procedures used by the SOC
</li></ul><ul><li>Resolve or coordinate the resolution of cyber security events
</li></ul><ul><li>Monitor incoming event queues for potential security incidents
</li></ul><ul><li>Create, manage, and dispatch incident tickets
</li></ul><ul><li>Monitor external event sources for security intelligence and actionable incidents
</li></ul><ul><li>Maintain incident logs with relevant activity
</li></ul><ul><li>Document investigation results, ensuring relevant details are passed to SOC Lead, Incident Management team and stakeholders
</li></ul><ul><li>Participate in root cause analysis or lessons learned sessions
</li></ul>Salary Range: $61,010.00 - $74,568.00 
General Description of Benefits: Benefits Link 
Requirements:
<ul><li>1 year of experience in Information Technology
</li></ul><ul><li>Familiarity with US-CERT Federal Incident Notification Guidelines
</li></ul><ul><li>Familiarity with Splunk Enterprise, Enterprise Security, and SOAR products
</li></ul><ul><li>Familiarity with CrowdStrike, TrendMicro and McAfee host-based solutions
</li></ul><ul><li>Knowledge of log, network, and system forensic investigation techniques
</li></ul><ul><li>Experience performing analysis of log files from a variety of sources, including individual host logs, network traffic logs, firewall logs, or intrusion prevention/detection logs
</li></ul><ul><li>Experience conducting intelligence driven defense utilizing the MITRE ATT&amp;CK framework and Cyber Kill Chain (CKC)
</li></ul><ul><li>Knowledge base of operating systems, network protocols, system administration, and security technologies
</li></ul><ul><li>Knowledge of TCP/IP Networking and the OSI model
</li></ul><ul><li>Experience monitoring threats via SIEM console
</li></ul><ul><li>Excellent problem solving, critical thinking, and analytical skills with the ability to de-construct problems
</li></ul><ul><li>Strong customer service skills and decision-making skills
</li></ul><ul><li>Ability to develop knowledge of client infrastructure
</li></ul> 
Req Benefits:
<div>https://ecstech.com/careers/benefits/&quot;&gt;https://ecstech.com/careers/benefits/</div></div>

SOC Analyst Junior

Join ECS and explore 14   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

ECS