Description

Lead a team of up to 30 cyber defense analysts in detection, incident response, and recovery coordination. Own the technical direction to diagnose and resolve enterprise cyber alerts.

Responsibilities

• Lead technical direction for CIRT staff to resolve enterprise alerts.
• Monitor incident queues and report on ticket status and defense tasks.
• Field escalated customer issues, resolving or referring to specialized experts.
• Analyze metrics trends and input on process improvements and roadmaps.
• Manage team performance via meetings, training, and policy implementation.

Required Skills

• Active Top Secret security clearance with SCI eligibility.
• Ability to obtain DHS suitability prior to employment.
• 10+ years of directly relevant experience in CERT/CIRT environments.
• Hands-on experience with network intrusion detection and response (Protect, Defend, Respond, Sustain).
• Detection, response, mitigation, and reporting of cyber-attacks.
• Knowledge of network protocols, devices, OS, and secure architectures.
• Proficiency in log analysis, evidence seizure, forensics, and data recovery.
• Understanding of current cyber threat TTPs.
• Proficiency with MS Office Applications.

Preferred Skills

• Experience with Splunk, malware reverse engineering, or computer forensics.
• Scripting experience with Python or Perl.
• Experience with Analyst Notebook or data visualization products.

Key Skills

Education

ANY GRADUATE