all source intelligence analyst - journeyman

business analyst

case manager, enterprise threat response Jobs in Washington

case manager, enterprise threat response

clinical research assistant Jobs in Washington

clinical research assistant

activity security representative ii Jobs in Washington

activity security representative ii

all source intelligence analyst - journeyman Jobs in Washington

incident response analyst

Amtrak

<div><p><b>Your success is a train ride away!</b></p><p>
As we move America&rsquo;s workforce toward the future, Amtrak connects businesses and communities across the country. We employ more than 20,000 diverse, energetic professionals in a variety of career fields throughout the United States. The safety of our passengers, our employees, the public and our operating environment is our priority, and the success of our railroad is due to our employees.</p><p></p><p><b><br>
Are you ready to join our team?</b></p><p>
Our values of &lsquo;Do the Right Thing, Excel Together and Put Customers First&rsquo; are at the heart of what matters most to us, and our Core Capabilities, &lsquo;Building Trust, Accountability, Effective Communication, Customer Focus, and Proactive Safety &amp; Security&rsquo; are what every employee needs to know and do to be most impactful at Amtrak. By living the Amtrak values, focusing on our capabilities, and actively embracing and fostering diverse ideas, backgrounds, and perspectives, together we will honor our past and make Amtrak a company of the future.</p><p></p><p><br>
The <b>Principal Cyber Threat Incident Response Analyst </b>will play a critical role within the Amtrak Cyber Fusion Center. In this role, you will support a digital forensic cyber incident response team to effectively respond to and recovering from cybersecurity incidents. You will execute the cyber incident response plan, response playbooks, and will ensuring timely resolution of security breaches</p><p><b>
ESSENTIAL FUNCTIONS:</b></p><ul><li>
As a Principal Cyber Threat Incident Response Analyst, you will provide industry-leading cyber incident response supporting the Cyber Fusion Center mission to effectively detect and respond to threats and reduce the overall impact of business risk before, during, and after an incident</li><li>
You will be able to resolve security incidents quickly, effectively and at scale with complete incident response including investigation, containment to support effective remediation, and crisis management</li><li>
In this role, you will technically navigate critical and high-profile incidents, performing digital forensic and incident response analysis with support from threat hunting, and malware triage analysts</li><li>
Support Amtrak-wide cyber incident response engagements, examine cloud, endpoint, and network-based sources of evidence</li><li>
Recognize and codify attacker Tools, Tactics, and Procedures (TTPs) and Indicators of Compromise (IOCs) that can be applied to current and future investigations</li><li>
Build scripts, tools, or methodologies to enhance Amtrak&rsquo;s incident investigation processes</li><li>
Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations</li><li>
Support Cyber Incident Exercises, Tabletops, and Cyber Incident Management Response Team with business leaders, stakeholders, and cross-functional teams.</li><li>
Support with Crisis Management, Emergency Management, Incident Response, Legal and OIG teams to conduct and coordinate on Cyber Incident Response Activities.</li><li>
Preferred knowledge and familiarity with Operational Technology (OT), Industrial Controls Systems (ICS) or Supervisory Control and Data Acquisition (SCADA) systems but not required.</li><li>
Cybersecurity certifications, courses, or hands-on experience with some of the following:<ul><li><div><ul><li>
Advanced Threat Detection</li><li>
Hacker tools, techniques</li><li>
Penetration Testing, Exploit Writing, and Ethical Hacking</li><li>
Offensive Security, Security Operations, Web Application Testing, or Cloud Security</li><li>
Reverse-Malware Engineering</li><li>
Digital Forensics and Incident Response</li><li>
PowerShell, JavaScript and Python</li><li>
Relevant certifications including GIAC Certified Incident Handler (GCIH), Certified Incident Response Handler (GCFA) or similar</li><li>
Experience with using SIEM systems, network security tools, and log analysis tools</li><li>
Experience with cyber incident response</li><li>
Experience with Mitre ATT&amp;CK framework</li><li>
Experience with threat intelligence, vulnerability management, and security incident response</li></ul></div></li></ul></li><li>
Regularly participate in tabletop exercises designed to identify gaps, improve skills, enhance communication, and engage with stakeholders.</li><li>
Review technical reports from vulnerability and penetration testing assessments, as well as results from tabletop exercise to identify potential future incidents.</li><li>
Develop, refine, recommend, and maintain playbooks, policies, and procedures to ensure alignment to industry best practices.</li></ul><p><b>
MINIMUM QUALIFICATIONS:</b></p><ul><li>
Bachelor&rsquo;s degree in computer science, Information Systems, Cybersecurity, or related technical field plus 7-10 years of relevant experience is required.</li></ul><p><b>
Experience on one or the combination of the below to satisfy education and experience requirements:</b></p><ul><li><div><ul><li><div><ul><li>
Incident Response</li><li>
Vulnerability Management</li><li>
Digital Forensics</li><li>
Network or Cloud Security</li><li>
Penetration Testing</li></ul></div></li></ul></div></li></ul><p><b>
One incident response centric certification:</b></p><ul><li><div><ul><li><div><ul><li>
GIAC Certified Incident Handler (GCIH)</li><li>
GIAC Response and Industrial Defense (GRID)</li><li>
GIAC Battlefield Forensics and Acquisition (GBFA)</li><li>
GIAC Certified Forensic Examiner (GCFE)</li><li>
GIAC Advanced Smartphone Forensics</li><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
GIAC Network Forensic Analyst (GNFA)</li><li>
GIAC Reverse Engineering Malware (GREM)</li><li>
EC-Council Certified Incident Handler (E|CIH)</li><li>
eLearnSecurity Incident Handling &amp; Response Professional (IHRP)</li><li>
SEI Computer Security Incident Handler (CSIH)</li><li>
NICCS Certified Incident Handler Engineer (CIHE)</li></ul></div></li></ul></div></li></ul><p><b>
In depth understanding of threats, vulnerabilities and principals of incident response and chain of custody.</b></p><ul><li>
Hands on experience with forensics tools and log correlation.</li><li>
Ability to think like an attacker and hunt within the security tool stack.</li><li>
Ability to incorporate the MITRE ATT&amp;CK Framework in everyday processes.</li></ul><p><b>
 </b><b>PREFERRED QUALIFICATIONS:</b></p><ul><li>
Master's degree in Cybersecurity, Information Technology, Digital Forensics, Computer Science, or equivalent technical field</li><li>
10+ years of experience within the cybersecurity field</li><li>
Basic knowledge of Operation Technology (OT), SCADA, HVAC and/or IoT</li></ul><p><b>
Two or more incident response centric certifications:</b></p><ul><li><div><ul><li><div><ul><li>
GIAC Certified Incident Handler (GCIH)</li><li>
GIAC Response and Industrial Defense (GRID)</li><li>
GIAC Battlefield Forensics and Acquisition (GBFA)</li><li>
GIAC Advanced Smartphone Forensics</li><li>
GIAC Certified Forensic Analyst (GCFA)</li><li>
GIAC Network Forensic Analyst (GNFA)</li><li>
GIAC Reverse Engineering Malware (GREM)</li><li>
EC-Council Certified Incident Handler (E|CIH)</li><li>
SEI Computer Security Incident Handler (CSIH)</li><li>
NICCS Certified Incident Handler Engineer (CIHE)</li><li>
eLearnSecurity Incident Handling &amp; Response Professional (IHRP)</li><li>
GIAC Certified Forensic Examiner (GCFE)</li></ul></div></li></ul></div></li></ul><p><b>
WORK ENVIRONMENT:</b></p><ul><li>
Amtrak offers several options for a working environment including 100% remote, on-site, and/or a hybrid schedule.</li><li>
This is a position that requires off-hours work and on-call participation.</li><li>
Please note your headquarters office may be in any one of Amtrak&rsquo;s locations across the United States. The ability and willingness to travel up to 30% to other office locations is required.</li></ul><p><b>
COMMUNICATIONS AND INTERPERSONAL SKILLS:</b><br>
Must have excellent oral and written communication skills.</p><p>
The salary/hourly range is $124,600-$161,352, Pay is based on several factors including but not limited to education, work experience, certifications, internal equity, etc. Depending on an employee&rsquo;s assigned worksite or location, Amtrak may consider a geo-pay differential to be applied to the employee&rsquo;s base salary. Amtrak may offer additional incentive and pay programs to recognize and reward our employees, including a short-term incentive bonus based upon factors such as individual and company performance that is commensurate with the level of the position and/or long-term incentive plan compensation. In addition to your salary, Amtrak offers a comprehensive benefit package that includes health, dental, and vision plans; health savings accounts; wellness programs; flexible spending accounts; 401K retirement plan with employer match; life insurance; short and long term disability insurance; paid time off; back-up care; adoption assistance; surrogacy assistance; reimbursement of education expenses; Public Service Loan Forgiveness eligibility; Railroad Retirement sickness and retirement benefits; and rail pass privileges. Learn more about our benefits offerings here.</p><p>
The salary/hourly range is $124,600.00 &ndash; $161,352.00. Pay is based on several factors including but not limited to education, work experience, certifications, etc. Depending on an employee&rsquo;s assigned worksite or location, Amtrak may consider a geo-pay differential to be applied to the employee&rsquo;s base salary. Amtrak may offer additional incentive and pay programs to recognize and reward our employees, including a short-term incentive bonus based upon factors such as individual and company performance that is commensurate with the level of the position. In addition to your salary, Amtrak offers a comprehensive benefit package that includes health, dental, and vision plans; health savings accounts; wellness programs; flexible spending accounts; 401K retirement plan with employer match; life insurance; short and long term disability insurance; paid time off; back-up care; adoption assistance; surrogacy assistance; reimbursement of education expenses; Public Service Loan Forgiveness eligibility; Railroad Retirement sickness and retirement benefits; and rail pass privileges. Learn more about our benefits offerings here.</p><p></p><p><b><br>
Requisition ID:</b>166157</p><p><b>
Work Arrangement:</b>06-Onsite 4/5 Days Click here for more information about work arrangements at Amtrak.
<br>
<b>Relocation Offered:</b>No
<br>
<b>Travel Requirements:</b>Up to 25%</p><p><b>
You power our progress through your performance.</b></p><p>
We want your work at Amtrak to be more than a job. We want your career at Amtrak to be a fulfilling experience where you find challenging work, rewarding opportunities, respect among colleagues, and attractive compensation. Amtrak maintains a culture that values high performance and recognizes individual employee contributions.</p><p><br>
Amtrak is committed to a safe workplace free of drugs and alcohol. All Amtrak positions requires a pre-employment background check that includes prior employment verification, a criminal history check and a pre-employment drug screen.</p><p>
Candidates who test positive for marijuana will be disqualified, regardless of any state or local statute, ordinance, regulation, or other law that legalizes or decriminalizes the use or possession of marijuana, whether for medical, recreational, or other use. Amtrak's pre-employment drug testing program is administered in accordance with DOT regulations and applicable law.</p><p><br>
In accordance with DOT regulations (49 CFR &sect; 40.25), Amtrak is required to obtain prior drug and alcohol testing records for applicants/employees intending to perform safety-sensitive duties for covered Department of Transportation positions. If an applicant/employee refuses to provide written consent for Amtrak to obtain these records, the individual will not be permitted to perform safety-sensitive functions.</p><p></p><p><br>
In accordance with federal law governing security checks of covered individuals for providers of public transportation (Title 6 U.S.C. &sect;1143), Amtrak is required to screen applicants for any permanent or interim disqualifying criminal offenses.</p><p><br>
Note that any education requirement listed above may be deemed satisfied if you have an equivalent combination of education, training and experience.</p><p><br>
Amtrak is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race/color, to include traits historically associated with race, including but not limited to, hair texture and hairstyles such as braids, locks and twists, religion, sex (including pregnancy, childbirth and related conditions, such as lactation), national origin/ethnicity, disability (intellectual, mental and physical), veteran status, marital status, ancestry, sexual orientation, gender identity and gender expression, genetic information, citizenship or any other personal characteristics protected by law.</p></div>

Principal Incident Response Analyst - 90406800 - Remote

Peraton

<div><div><h5 class="jobSectionHeader"><b>ABOUT PERATON</b></h5><p>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</p></div><div><h5 class="jobSectionHeader"><b>
PROGRAM OVERVIEW</b></h5><div>
Engineering, integration, and cybersecurity support to design, build, and test enhanced services for the Department of Navy's IT architecture. Offers a wide range of roles, from cybersecurity experts to engineers specializing in systems, networks, software, and data center services.</div></div><div><h5 class="jobSectionHeader"><b>
ABOUT THE ROLE</b></h5><div><div>
Peraton is seeking a NOSC Analyst to support our customer onsite in Washington D.C.</div><ul><li>
Coordinate across the enterprise to ensure network security devices are being monitored and are receiving or generating alerts.</li><li>
Identify security risks and exposures, determine causes of security violations, and suggest procedures to halt future incidents and improve security.</li><li>
Perform network traffic analysis utilizing raw packet data, net flow, IDS, IPS and custom sensor output, as it pertains to the cyber security of communications networks.</li><li>
Device monitoring of tiered alerts for all operational networks.</li><li>
Maintain documentation for processes and procedures.</li><li>
Create incident reports providing both high level and in-depth details for investigations.</li><li>
Lead investigations and mentor junior analysts.</li><li>
Develop training pipeline and brown bag sessions for team cross training.</li></ul></div></div><div><h5 class="jobSectionHeader"><b>
QUALIFICATIONS</b></h5><div><ul><li>
Requires a Top Secret with SCI eligibility level clearance</li><li>
Min 8 years with BS/BA; 4 years of additional relevant work experience may be considered in lieu of a Bachelors degree</li><li>
8 years of Incident Handler/Incident Response experience</li><li>
Requires ability to lead cyber investigation and brief updates to customer and team lead</li><li>
Requires current DoD 8570 IAT Level II certification (CCNA Security, CySA+, CICSP, GSEC, Security+ CE, SSCP)</li><li>
Requires current DoD 8570 CSSP-Analyst certification. (CEH, CFR, CySA+, GCIA, GCIH, GICSP, SCYBER)</li></ul><div><b>
Benefits:</b></div><div><b><i>
Peraton offers enhanced benefits to employees working on this critical National Security program, which include heavily subsidized employee benefits coverage for you and your dependents, 25 days of PTO accrued annually up to a generous PTO cap and eligibility to participate in an attractive bonus plan.</i></b></div></div></div><div><h5 class="jobSectionHeader"><b>
DETAILS</b></h5><div><p>
<b>Target Salary Range:</b> $104,000 - $166,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
</p></div><div><p><b>Benefits Statement:</b> Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
</p></div><div><p>
<b>Application Duration Statement:</b> The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
</p></div><p><b>
EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</p></div></div><div></div>

NOSC CYBER ANALYST

Bank of America

<div><p><b>Job Description:</b></p><p></p><p>
At Bank of America, we are guided by a common purpose to help make financial lives better through the power of every connection. We do this by driving Responsible Growth and delivering for our clients, teammates, communities and shareholders every day.<br>
<br>
Being a Great Place to Work is core to how we drive Responsible Growth. This includes our commitment to being an inclusive workplace, attracting and developing exceptional talent, supporting our teammates&rsquo; physical, emotional, and financial wellness, recognizing and rewarding performance, and how we make an impact in the communities we serve.<br>
<br>
Bank of America is committed to an in-office culture with specific requirements for office-based attendance and which allows for an appropriate level of flexibility for our teammates and businesses based on role-specific considerations.<br>
<br>
At Bank of America, you can build a successful career with opportunities to learn, grow, and make an impact. Join us!</p><p><b><br>
Job Description:</b><br>
This job is responsible for supporting evaluations of cyber security threats and updating defensive capabilities to reduce the bank's risk of exposure. Key responsibilities include conducting analyses of the threat environment and threats to the bank, including post incident analysis, applying a multi-faceted situational awareness of cyber security processes to protect against threats, and implementing proactive defensive actions for the security, continuity, and confidentiality of information.</p><p></p><p>
What you'll do</p><ul><li>
Respond, triage, and adapt to real-time threats targeting the organization through the lens of malware delivery and execution.</li><li>
Perform static, dynamic, and behavioral analysis of malicious software and potential indicators of compromise.</li><li>
Maintain detailed documentation regarding analysis findings and producing comprehensive reports encompassing observations, actions taken, and recommendations.</li><li>
Identify cyber risks and help develop improvements to controls and detection mechanisms.</li><li>
Collaborate with response teams to defend against emerging threats and contribute to Incident Response efforts.</li></ul><p></p><p>
Who you are
</p><ul><li>We are looking for mid-level candidates with malware analysis and incident response experience.</li><li>
Specific experience with triaging detections, prioritizing threats, performing static and dynamic analysis, identifying security gaps, and implementing preventative measures.</li><li>
Candidates should have a very strong investigative mindset with an ability to drive process changes and implement control enhancements.</li><li>
Candidates typically should have 3-5 years of relevant experience in one or more threat prevention disciplines focusing on Email, Web, or Endpoint.</li></ul><p></p><p>
Required Skills</p><ul><li>
Understanding of browser exploitation techniques</li><li>
Familiarity of web based technologies such as JavaScript or HTML and how they are commonly abused by various threat actors or techniques.</li><li>
Experience with reviewing and analyzing Email Headers.</li><li>
Experience with detecting phishing and other common email threats.</li><li>
SIEM experience with event correlation and searching.</li><li>
Experience with dynamic analysis tools such as Process Monitor, FakeDNS, Regshot, or Wireshark.</li><li>
Familiarity with use and interpretation of malware analysis results from sandbox technologies.</li><li>
Technical experience and ability to operate and maintain a virtualized sandbox environment.</li><li>
Familiarity with URL categorization and analysis tools like Fiddler, commercial sandbox, or web proxy technologies.</li><li>
Ability to assess files or URLs and extract Indicators of Compromise (IoCs) such as malicious domains, IPs, and file hashes.</li><li>
Experience with documentation and ability to clearly articulate thoughts to a wide variety of intended audiences (teammates, technical, non-technical, leadership, etc.).</li><li>
Knowledge of Endpoint Detection and Response (EDR) tools</li><li>
Knowledge of forensic artifacts such as Browser, Registry, or Event Log artifacts.</li></ul><p></p><p>
Desired Skills</p><ul><li>
3+ years of experience conducting end to end Malware analysis specifically around either Email, Web, or Endpoint.</li><li>
3+ years of conducting incident response using commercial products and tools.</li><li>
3+ years of experience in digital forensics</li><li>
Knowledge of at least one major cloud services provider (AWS, GCP, Azure) technologies</li><li>
Ability to create scripts and other forms of automation</li><li>
Experience conducting interviews with an interrogative mindset</li></ul><p></p><p><b>
Skills:</b></p><ul><li>
Cyber Security</li><li>
Data Privacy and Protection</li><li>
Problem Solving</li><li>
Process Management</li><li>
Threat Analysis</li><li>
Business Acumen</li><li>
Data and Trend Analysis</li><li>
Interpret Relevant Laws, Rules, and Regulations</li><li>
Risk Analytics</li><li>
Stakeholder Management</li><li>
Access and Identity Management</li><li>
Data Governance</li><li>
Encryption</li><li>
Information Systems Management</li><li>
Technology System Assessment</li></ul><p></p><p><b>
Shift:</b></p>
1st shift (United States of America)<p></p><p><b>
Hours Per Week:</b></p>
40</div><p></p>

Malware Defense Analyst

<div><div><h5 class="jobSectionHeader"><b>ABOUT PERATON</b></h5><p>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</p></div><div><h5 class="jobSectionHeader"><b>
ABOUT THE ROLE</b></h5><div><div>
Peraton is currently hiring a <b>Cyber Case Management &ndash; Mid-level Process Assurance Analyst</b> for its' Federal Strategic Cyber programs.</div><div></div><div><b><br>
Location: Arlington, VA and Washington, DC (On-Site)</b></div><div></div><div><br>
As the nation&rsquo;s risk adviser, we (CISA) help our partners strengthen their own capabilities and connect our stakeholders in industry and government to each other and to resources, analyses, and tools to help them build their own cyber, communications, and physical security and resilience, and in turn, strengthening national resilience.</div><div></div><div><b><br>
In this role, you will:</b></div><ul><li>
Lead small projects with manageable risks and resource requirements</li><li>
Interact with senior customer personnel on significant matters</li><li>
Coordinate activity across organizational lines</li><li>
Develop the overarching process of receiving, triaging, assigning, tracking, closing, and finalizing the record of reported incidents</li><li>
Draft organizational documentation such as Concept of Operations, Standard Operating Procedures, Work Instructions, etc.</li><li>
Ensure tactical implementation of the incident reporting processes, staffing, and technologies</li><li>
Identify opportunities to increase the efficacy of cyber incident report handling and workflows</li><li>
Document challenges, coordinates across teams to identify opportunities for process improvement, and recommend solutions to ensure incident reporting apparatus success</li><li>
Understand cyber, physical, and communications incident trend analysis and reporting functions</li><li>
Correlate and associate potential threat activities to inform senior decision makers</li><li>
Ensure timely and effective response to internal and external mission partners</li><li>
Validate the appropriate incident escalation and reporting procedures</li><li>
Seek to improve the quality, productivity, and sharing of information pertaining to the incident reporting life cycle</li></ul><div><b>
Duties may also include but are not limited to:</b></div><ul><li>
Act as a resource for colleagues with less experience</li><li>
Identify, log, categorize, perform initial triage, routing, and resolving incidents and requests</li><li>
Manage the lifecycle of incident and request tickets in accordance with interface agreements</li><li>
Performing customer relationship management activities with mission partners</li><li>
Perform internal coordination and follow up for distributed actions</li><li>
A willingness to learn new tools and technologies and take on new responsibilities as assigned</li></ul></div></div><div><h5 class="jobSectionHeader"><b>
QUALIFICATIONS</b></h5><div><div><b>
Basic Requirements:</b></div><ul><li>
BS/BA with 5 years of related experience. An additional 4 years of experience may be considered in lieu of degree.</li><li>
In-depth conceptual and practical knowledge in job discipline and basic knowledge of related job disciplines.</li><li>
Experience leading projects or having led project steps within a broader project or have accountability for on-going activities or objectives.</li><li>
Experience in providing solutions to complex problems which require regular use of ingenuity and creativity.</li><li>
Demonstrated ability to work independently, receive minimal guidance.</li><li>
Experience with developing formal, written guidelines or instructions with operational and technical components.</li><li>
Demonstrated understanding of organizational structure and alignment to business operations.</li><li>
U.S. citizenship and an active Top Secret Security Clearance and the ability to obtain TS/SCI.</li><ul><li>
In addition, selected candidate must be able to obtain and maintain a favorably adjudicated DHS background investigation (EOD) for continued employment.</li></ul></ul><div><b>
Preferred Qualifications:</b></div><ul><li>
Security+ Certification.</li><li>
ITIL Foundation Certification.</li><li>
Minimum of 1 year supporting a WATCH Operations Center or Security Operations Center.</li><li>
Worked within a customer service-oriented environment.</li><li>
Developed business operational workflow models.</li><li>
Exceptional communication skills.</li><li>
Technical writing skills.</li><li>
Experience in using the Remedy and ServiceNow ticketing suite.</li></ul></div></div><div></div><div><h5 class="jobSectionHeader"><b><br>
DETAILS</b></h5><div><p>
<b>Target Salary Range:</b> $86,000 - $138,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
</p></div><div><p><b>Benefits Statement:</b> Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
</p></div><div><p>
<b>Application Duration Statement:</b> The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
</p></div><p><b>
EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</p></div></div><div></div>

CYBER CASE MANAGEMENT – MID-LEVEL PROCESS ASSURANCE ANALYST

Visual Soft, Inc

<p>Visual Soft, Inc is seeking qualified candidates to work on our efforts with a Prime for their end customer, a federal agency.<br>
<br>
<b>Position</b>: SOC - Security Analyst - (US Citizenship is a MUST) - (fully <b>REMOTE with first 2 weeks onsite training in Shift 1- 8 AM to 5 PM </b>)<br>
<b>Location</b>: Washington, DC, next to Union Station metro<br>
<b>Compensation</b>: Based on certifications, education and experience, <b>very competitive</b><br>
<b>Various Shifts available. SHIFT TIMINGS:</b><br>
<br>
<b>3rd SHIFT- M-F 11PM-7:30AM</b><br>
<b>JOB DESCRIPTION</b>:<br>
The SOC Analyst has the primary responsibility of aggressively monitoring and responding to alerts triggered in the SIEM tool or requests for assistance from customers. The SOC Analyst will use a variety of tools to investigate incidents and take immediate action or recommend a course of action to safeguard the U.S. Courts systems. The SOC Analyst works as <b>Tier 1/2</b> support and will be under a senior soc analyst/shift lead for review before completing event notation to assure correctness in reviews. Events that require over 15 minutes of analysis are to be escalated to the Seniors on shift for analysis.<br>
<br>
<b>General Experience:</b><br>
<b>****PRIOR or ONGOING experience (2+ yrs) of working in a SOC environment is a MUST.****</b><br>
<b>FIRST TWO (2) WEEKS WILL BE ON SHIFT 1, 8 AM TO 5 PM FOR TRAINING FOLLOWING THAT, THE SELECTED CANDIDATE WILL BE MOVED TO SHIFT 3.</b><br>
<br>
Please do 'not; apply if you do 'NOT' have above professional experience.<br>
<br>
A minimum of two (2)+ years of hands-on network intrusion detection experience with 3-5 years of total experience. SOC Analyst must have the following skills: The ability to investigate and evaluate network traffic, and the ability to read and interpret log and sniffer packets, <b>Wireshark</b>. The ability to analyze data from a variety of sources over time and create a logical narrative of observed behavior, and the ability to communicate clearly both orally and in writing.<br>
<br>
<b>Specialized Experience:
</b><br>
Candidate will have 2+ years of hands-on performing intrusion detection analytics working with the <b>examination of logs and console events in the following working experience areas of; Splunk, examining Snort based IDS events, PCAP, web server log review, and working in a SIEM environment.</b><br>
<br>
<b>Years of Experience</b>:5+ years<br>
<b>Education Requirement</b>: High School diploma preferred, industry certifications are desired such as CEH or Security+ or other industry certifications.<br>
<b>Clearance requirement:</b> U.S. Citizenship is required.<br>
<br>
<b>Standard Benefits:</b><br>
 Our standard benefits include: Our standard benefits include 3 weeks of Paid time off (PTO that includes sick leave). Any unused PTO will be issued as a check at the end of an employee's anniversary with us. we also provide 2 floating and 8 public holidays. Floating and holidays expire at the end of every year of service of an employee. In addition, company will cover 50% of health and dental insurances only for all full time employees, however, dependents can be added at extra cost. Employee's health and dental coverage becomes effective after 30 days or first of the month after an employee completes initial 30 working days, we cover 50% for the employee's health and dental insurances. Dependents coverage for health and dental insurances is available as an out of pocket expense for employees. An employee has to finish all of your paper work for health and dental in the first 30 days of your employment with us. We provide STD, LTD and one time salary equivalent of life insurance at NO cost to all full time employees. All full time employees or w-2 employees with no benefits will be eligible to participate in company's 401k program after 90 days of employment with a company match of 4%, immediate vesting. In addition, all w-2 employees are eligible to be part of company's profit sharing, no employee contributions required.</p>

SOC Security Analyst / US Citizenship / Fully REMOTE

Agile Defense

<div><div>At Agile Defense we know that action defines the outcome and new challenges require new solutions. That&rsquo;s why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next.</div><div></div><div><br>
Our vision is to bring adaptive innovation to support our nation's most important missions through the seamless integration of advanced technologies, elite minds, and unparalleled agility&mdash;leveraging a foundation of speed, flexibility, and ingenuity to strengthen and protect our nation&rsquo;s vital interests.</div><div></div><div><br>
Requisition #: 1475</div>
<div>Job Title: SOC Lead</div>
<div>Location: 5x/per week 45 L St NE Washington, District of Columbia 20554</div>
<div>Clearance Level: Top Secret Eligible</div>
<div>Required Certification(s):</div>
<ul><li>Microsoft Certified Security Operations Analyst Associate (Must have first day)</li></ul>
<ul><li>CISSP OR CISM (Must obtain within 150 days of start date)</li></ul>
<ul><li>GIAC Incident Response Certification (Must obtain within 150 days of start date)</li></ul>
<div>GIAC Enterprise Incident Response (GEIR)</div>
<div>GIAC Cloud Forensics Responder (GCFR)</div>
<div>GIAC Certified Forensic Analyst (GCFA)</div>
<div>GIAC Network Forensic Analyst (GNFA)</div>
<div>GIAC Certified Incident Handler (GCIH)</div>
<div>GIAC Experienced Forensics Analyst (GX-FA)</div>
<div>GIAC Linux Incident Responder (GLIR)</div>
<div></div>
<div>SUMMARY</div>
<div></div>
<div>We are seeking a SOC Lead for an opportunity to lead and manage all Security Operations Center functions. The SOC Lead will ensure unified service delivery across sub-task areas, provide operational direction and influence executive leadership to align security operations with enterprise objectives.</div>
<div>The SOC Lead role requires deep expertise in SOC management, incident response and hybrid on premises/cloud environments. This is a unique opportunity to shape the growth, development, and culture of an exciting and fast-growing company in the cybersecurity market.</div>
<div></div>
<div>JOB DUTIES AND RESPONSIBILITIES</div>
<div></div>
<ul><li>Manage all SOC operations, ensuring unified and effective service delivery.</li></ul>
<ul><li>Coordinate task execution across sub-task leads to achieve enterprise-level objectives.</li></ul>
<ul><li>Provide strategic and operational direction to SOC teams through subordinate managers.</li></ul>
<ul><li>Oversee the integration and coordination of on-premises and cloud-based SOC capabilities.</li></ul>
<ul><li>Drive continuous improvement in SOC processes to strengthen detection, response and recovery.</li></ul>
<ul><li>Influence organizational practices and approaches to align with cybersecurity priorities.</li></ul>
<ul><li>Communicate effectively with executive leadership and stakeholders on SOC performance and posture.</li></ul>
<ul><li>Ensure SOC operations adhere to the full NIST Cybersecurity Framework: Identify, Protect, Detect, Respond and Recover.</li></ul>
<div></div>
<div>QUALIFICATIONS</div>
<div>Required Certifications</div>
<div></div>
<ul><li>Microsoft Certified Security Operations Analyst Associate (Must have first day)</li></ul>
<ul><li>CISSP OR CISM (Must obtain within 150 days of start date)</li></ul>
<ul><li>GIAC Incident Response Certification (Must obtain within 150 days of start date)</li></ul>
<div>GIAC Enterprise Incident Response (GEIR)</div>
<div>GIAC Cloud Forensics Responder (GCFR)</div>
<div>GIAC Certified Forensic Analyst (GCFA)</div>
<div>GIAC Network Forensic Analyst (GNFA)</div>
<div>GIAC Certified Incident Handler (GCIH)</div>
<div>GIAC Experienced Forensics Analyst (GX-FA)</div>
<div>GIAC Linux Incident Responder (GLIR)</div>
<div></div>
<div>Education, Background, and Years of Experience</div>
<ul><li>7+ years of experience in SOC operations and incident response including SOC management and an IR commander role.</li></ul>
<div></div>
<div>ADDITIONAL SKILLS &amp; QUALIFICATIONS</div>
<div>Required Skills</div>
<div></div>
<ul><li>Possess the knowledge, skills, tasks, and capabilities described in the NICE Work Roles for Incident Response (PD-WRL-003), Insider Threat Analysis (PD-WRL-005), and Threat Analysis (PD-WRL-006) as outlined in the NICE Work Role Framework.</li></ul>
<ul><li>Managing SOC operations and incident response for enterprise environments (50,000+ endpoints), including 5+ years leading hybrid on premises/cloud SOCs with full NIST Cybersecurity Framework coverage.</li></ul>
<ul><li>Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.</li></ul>
<ul><li>Expertise in managing enterprise SOC operations across on-premises and cloud environments.</li></ul>
<ul><li>Strong background in cybersecurity incident response across large, complex enterprise environments.</li></ul>
<ul><li>Proven ability to align SOC functions with the NIST Cybersecurity Framework.</li></ul>
<ul><li>Experience coordinating subordinate managers and technical leads to deliver cohesive operations.</li></ul>
<ul><li>Skilled at influencing executive leadership and driving organizational adoption of SOC best practices</li></ul>
<div></div>
<div>WORKING CONDITIONS</div>
<div></div>
<div>Environmental Conditions</div>
<ul><li>Onsite 5 days a week in Washington, D.C.</li></ul>
<ul><li>Must pass a background investigation</li></ul>
<div></div>
<div>Strength Demands</div>
<ul><li>Light &ndash; 20 lbs. Maximum lifting with frequent lift/carry up to 10 lbs. A job is light if less lifting is involved but significant walking/standing is done or if done mostly sitting but requires push/pull on arm or leg controls.</li></ul>
<div></div>
<div>Physical Requirements</div>
<ul><li>Stand or Sit; Walk; Repetitive Motion; Use Hands / Fingers to Handle or Feel; Stoop, Kneel, Crouch, or Crawl; See; Push or Pull; Climb (stairs, ladders) or Balance (ascend / descend, work atop, traverse).</li></ul>
<div>Employees of Agile Defense are our number one priority, and the importance we place on our culture here is fundamental. Our culture is alive and evolving, but it always stays true to its roots. Here, you are valued as a family member, and we believe that we can accomplish great things together. Agile Defense has been highly successful in the past few years due to our employees and the culture we create together.</div><div></div><div><br>
What makes us Agile? We call it the 6Hs, the values that define our culture and guide everything we do. Together, these values infuse vibrancy, integrity, and a tireless work ethic into advancing the most important national security and critical civilian missions. It's how we show up every day. It's who we are.</div><div></div><div><br>
We also believe in supporting our employees by offering a competitive and comprehensive benefits package. To explore the benefits we offer, please visit our website under the Careers section.</div><div></div><div><b><br>
Happy </b>- Be Infectious.</div><div>
Happiness multiplies and creates a positive and connected environment where motivation and satisfaction have an outsized effect on everything we do.</div><div></div><div><b><br>
Helpful</b> - Be Supportive.</div><div>
Being helpful is the foundation of teamwork, resulting in a supportive atmosphere where collaboration flourishes, and collective success is celebrated.</div><div></div><div><b><br>
Honest</b> - Be Trustworthy.</div><div>
Honesty serves as our compass, ensuring transparent communication and ethical conduct, essential to who we are and the complex domains we support.</div><div></div><div><b><br>
Humble</b> - Be Grounded.</div><div>
Success is not achieved alone, humility ensures a culture of mutual respect, encouraging open communication, and a willingness to learn from one another and take on any task.</div><div></div><div><b><br>
Hungry </b>- Be Eager.</div><div>
Our hunger for excellence drives an insatiable appetite for innovation and continuous improvement, propelling us forward in the face of new and unprecedented challenges.</div><div></div><div><b><br>
Hustle</b> - Be Driven.</div><div>
Hustle is reflected in our relentless work ethic, where we are each committed to going above and beyond to advance the mission and achieve success.</div><div></div><div><b><br>
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities</b></div>
<p>
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.</p></div>

SOC Operations Lead

<div><div><h5 class="jobSectionHeader"><b>ABOUT PERATON</b></h5><p>
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world&rsquo;s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees solve the most daunting challenges that our customers face. Visit peraton.com to learn how we&rsquo;re keeping people around the world safe and secure.</p></div><div><h5 class="jobSectionHeader"><b>
PROGRAM OVERVIEW</b></h5><div>
Engineering, integration, and cybersecurity support to design, build, and test enhanced services for the Department of Navy's IT architecture. Offers a wide range of roles, from cybersecurity experts to engineers specializing in systems, networks, software, and data center services.</div></div><div><h5 class="jobSectionHeader"><b>
ABOUT THE ROLE</b></h5><div><div>
Peraton is seeking a NOSC Cyber Manager to support our customer onsite in Washington D.C.</div><ul><li>
Working as expert, conducts research and evaluates technical and all-source intelligence with specific emphasis on network operations and cyber warfare tactics, techniques, and procedures focused on the threat to networked weapons platforms and US and DoD information networks.</li><li>
Analyzes network events to determine the impact on current operations and conduct all-source research to determine advisory capability and intent.</li><li>
Prepares assessments and cyber threat profiles of current events based on the sophisticated collection, research, and analysis of classified and open-source information. Correlates threat data from various sources.</li><li>
Develops and maintains analytical procedures to meet changing requirements and ensure maximum operations.</li><li>
Collects data using a combination of standard intelligence methods and business processes.</li><li>
Produces high-quality papers, presentations, recommendations, and findings for senior US government intelligence and network operations officials.</li><li>
Mentoring and assisting junior and mid-level Incident Handlers for investigations</li><li>
Interface with customer onsite on behalf of the SOC team.</li><li>
Effective communication with customer and contract leadership leveraging briefing and writing skills</li><li>
Extensive knowledge in creating official documentation and procedures.</li><li>
Able to conduct gap analysis for the team.</li><li>
Experience with wide range of security vendor tools as well training analyst to use them.</li></ul></div></div><div><h5 class="jobSectionHeader"><b>
QUALIFICATIONS</b></h5><div><ul><li>
10 years of Incident Handler/Incident Response experience, and at least 5 years supervisory or lead experience</li><li>
Requires a Top Secret with SCI eligibility level clearance</li><li>
SIEM content development</li><li>
Requires current DoD 8570 IAT Level II certification (CCNA Security, CySA+, CICSP, GSEC, Security+ CE, SSCP)</li><li>
Requires current DoD 8570 CSSP-Analyst certification. (CEH, CFR, CySA+, GCIA, GCIH, GICSP, SCYBER)</li></ul></div></div><div><h5 class="jobSectionHeader"><b>
DETAILS</b></h5><div><p>
<b>Target Salary Range:</b> $135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual&rsquo;s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.
</p></div><div><p><b>Benefits Statement:</b> Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at https://www.careers.peraton.com/benefits.
</p></div><div><p>
<b>Application Duration Statement:</b> The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.
</p></div><p><b>
EEO:</b> Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.</p></div></div><div></div>

NOSC CYBER MANAGER

Explore 186+ Incident response analyst in Washington this March. Find roles across top companies and apply now to boost your career.