Cyberdefense Incident Responder - Arlington, United States - Apexon

Apexon

Verified Company

Arlington, United States

3 weeks ago

Posted by:

Mark Lane

beBee recruiter

**Location

Rate:
Market

W2 and US citizens only

Required Skills:

2+ years of investigations work experience involving insider risk investigations, security incident response, technical investigations, intellectual property investigations, and/or financial fraud investigations.
35+ years of experience in UEBA and/or Splunk Enterprise Security
7+ years of experience in Cyber Security domain
Experience thriving in a heavily regulated environment
Experience in Splunk content development and Splunk Search Processing Language (SPL)
Knowledge of Machine Learning (ML) and how it applies to Insider Risk programs.

Preferred Skills:
Splunk ES/UBA

Day-to-day Responsibilities:

Assist in maturing an Insider Risk Program's operational support, including the development of playbooks and workflows for monitoring against potential insider risks, developing detection use cases, and conducting incident analysis.
Implement federal government and industry standards and best practices regarding insider risk programs, including development and maintenance of OCISO programmatic gap analyses and implementation roadmaps.
Assist in the creation of Gap Analysis on current tool usage for the Insider Risk program and make recommendations based on industry best practices and client organization.
Develop and maintain a convergence model for insider risk mitigation that reduces risk to client's personnel and assets.
Develop and improve insider risk modeling that leverages Splunk User Behavior and Entity Analytics (UEBA), Data Loss Prevention (DLP), Splunk Enterprise Security (ES), Microsoft Purview, Machine Learning, and automated solutions in place."

Expected Deliverables:

Develop and improve insider risk modeling that leverages Splunk User Behavior and Entity Analytics (UEBA), Data Loss Prevention (DLP), Splunk Enterprise Security (ES), Microsoft Purview, Machine Learning, and automated solutions in place.
Develop and expand situational playbooks that leverage client's automated capabilities.
Leverage excellent interpersonal skills to coordinate with client's business and technology leaders to develop and maintain programmatic solutions to insider risk.
Lead and assist in the investigation of all incidents involving insider risk.

Education:
BS - mínimal

Pay:
From $50.00 per hour

Expected hours: 40 per week

Benefits: