Jobs
>
Arlington

    Incident Response Analyst with OT/ICS/SCADA - Arlington, United States - Peraton

    Default job background
    Description

    About Peraton: Peraton is not just your average national security company. We are a cutting-edge organization that takes on missions of great importance worldwide, even reaching the farthest corners of the galaxy.

    As the top player in integrating mission capabilities and driving transformative IT solutions, we provide reliable and innovative technologies to safeguard our nation and its allies.

    Peraton operates right at the crucial convergence point between conventional and unconventional threats across various domains: land, sea, space, air, and cyberspace. We are a trusted partner to key government agencies and offer support to all branches of the U.S. armed forces. Our team tackles the seemingly impossible every day by solving the toughest challenges our clients face. Visit our website to discover more about how we are dedicated to ensuring the safety and security of people across the globe.

    Responsibilities:

    • Respond to cybersecurity incidents in ICS/OT/IT environments and provide recommendations to prevent recurrence across critical infrastructure sectors.
    • Apply specialized knowledge to resolve cybersecurity incidents and conduct proactive threat hunting.
    • Engage in highly technical operations, forensic analysis, and act as a consultant to advise client decision-makers continuously.
    • Offer industry expertise for various critical infrastructure sectors including Water, Power, Critical Manufacturing, and Transportation.
    • Follow established procedures to respond to and escalate incidents.
    • Define procedures for responding to customer cybersecurity incidents in industrial control system environments.
    • Utilize traditional incident response and threat hunting methodologies in industrial control system/critical infrastructure settings.
    • Collaborate with a team of host, network, and cloud forensic analysts to meet mission requirements for incident response and threat hunting.
    • Maintain accurate records of incident response activities and findings.
    • Prepare and present incident reports to management and stakeholders.
    • Stay updated on the latest security trends to enhance hunt and incident response operations continuously.
    • Demonstrate a self-starting attitude with strong attention to detail and critical thinking skills.
    • Show a strong customer-service orientation with exceptional written and oral communication abilities.
    • Ability to self-train and troubleshoot new tools and methodologies independently.
    • Occasional onsite requirement for a minimum of one day per week with up to three days based on situational demands.
    • Involves an estimated 40% travel.

    Qualifications Required:

    • Bachelor's degree and at least 5 years of relevant experience. An additional 4 years will be considered in lieu of a degree. 4 years of Threat Hunting or Digital Forensics & Incident Response (DFIR) experience.
    • 2 years of Threat Hunting or DFIR experience directly supporting Critical Infrastructure (CI) / Industrial Control System (ICS) environments.
    • Proficiency in security site assessments and scoping, including analysis of network security architecture, baseline ports, protocols, and services.
    • Experience in scripting with Python, Bash, PowerShell, and/or JavaScript.
    • Familiarity with using a SIEM tool for identifying patterns, detecting anomalies, and analyzing trends.
    • Knowledge of analyzing various industrial control systems network protocols such as ModBus, ENIP/CIP, BACnet, DNP3, etc.
    • Experience with common open source and commercial tools for security event analysis, incident response, computer forensics, malware analysis, or other security operations areas.
    • Experience with collection and detection tools, including OSS/COTS host-based and network-based tools.
    • U.S. citizenship and an Active Top Secret Security Clearance required.
    • Selected candidates must be able to obtain and maintain a favorably adjudicated DHS background investigation for ongoing employment.
    Desired:
    • Certifications: GISCP and either GFCA or GNFA.
    • Experience on DoD Cyber Protection Teams is a plus.
    • Experience in digital forensics and analysis on a variety of vendor/OEM equipment, including laptop/desktops, PLC's, HMI's, Historians, and related SCADA systems.
    • Experience with SIEM (Splunk) - including threat hunting, analytic development, dashboards, and reporting.
    • Familiarity with regulatory standards and frameworks relevant to critical infrastructure like NIST, IEC.
    • Ability to automate simple/repeatable critical tasks.

    Benefits:

    At Peraton, we prioritize our employee's well-being with a range of benefits designed to support you beyond your daily work responsibilities. We are fully dedicated to the growth and development of our team members.

    • Paid Time-Off and Holidays
    • Retirement benefits
    • Life & Disability Insurance
    • Career Development opportunities
    • Tuition Assistance and Student Loan Financing
    • Paid Parental Leave
    • Additional Medical, Dental, & Vision Care benefits


  • Peraton Arlington, United States Full time

    Responsibilities · Peraton is currently seeking an experienced Incident Response Analyst with OT/ICS/SCADA experience for its' Federal Strategic Cyber program in Arlington, VA. · Location: On-site role in Arlington, VA. Ideal candidate needs to be amenable to travel, approximate ...


  • Peraton Arlington, United States

    About Peraton Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deli ...


  • Peraton Arlington, United States

    About Peraton Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deli ...


  • STEMBoard Arlington, United States

    Currently hiring an experienced Incident Response Analyst with OT/ICS/SCADA experience for its' Federal Strategic Cyber program in Arlington, VA. · (Ideal candidate needs to be amenable to travel, approximately 40%) · In this role, you will: · + Respond to cybersecurity incidents ...


  • Peraton Arlington, United States

    Responsibilities · Peraton is currently seeking an experienced Incident Response Analyst with OT/ICS/SCADA experience for its' Federal Strategic Cyber program in Arlington, VA. · Location: On-site role in Arlington, VA. Ideal candidate needs to be amenable to travel, approximate ...


  • Toyon Research Ashburn, United States

    U.S. Citizenship Required. Ability to qualify for a US Department of Defense security clearance required. · This position is in-person. · Toyon is seeking an ICS SCADA Systems Engineer to support the design and implementation of specialized industrial network and SCADA systems ...


  • Toyon Research Ashburn, United States

    U.S. Citizenship Required . Ability to qualify for a US Department of Defense security clearance required. · This position is in-person. · Toyon is seeking an ICS SCADA Systems Engineer to support the design and implementation of specialized industrial network and SCADA systems ...


  • The MITRE Corporation Gaithersburg, United States

    Why choose between doing meaningful work and having a fulfilling life? At MITRE, you can have both. That's because MITRE people are committed to tackling our nation's toughest challenges—and we're committed to the long-term well-being of our employees. MITRE is different from mos ...


  • MITRE Gaithersburg, United States Full time

    Why choose between doing meaningful work and having a fulfilling life? At MITRE, you can have both. That's because MITRE people are committed to tackling our nation's toughest challenges—and we're committed to the long-term well-being of our employees. MITRE is different from mos ...

  • Zoom Video Communications, Inc.

    Federal Leader

    1 week ago


    Zoom Video Communications, Inc. Washington, United States

    **What you can expect**: · **Zoom Video Communications seeks an experienced U.S. Federal Sales Leader to drive revenue, mentor and build our existing team in the U.S. Federal Government sector.**: · **About the Team**: · **The Zoom sales team is a dynamic force driving the compan ...


  • Leidos Alexandria, United States

    **Description** · Leidos is seeking an Industrial Controls Systems (ICS) Manager to join our growing team, in support of Security Engineering Programs - Center for Information Systems Security (SEP-CISS). As the ICS Manager, you will oversee a team of controls engineers and techn ...


  • City of Alexandria VA Sanitation Authority Alexandria, United States

    **Be a part of something bigger than yourself.** · Looking for a meaningful career? At AlexRenew, we're committed to protecting our community, delivering healthier waterways, and building a lasting legacy of environmental stewardship in the region. Each year, our team processes a ...


  • STEMBoard Arlington, United States

    Currently hiring an Industrial Control System Cyber Threat Intelligence Analyst for its Federal Strategic Cyber program in Arlington, VA. · In this role, you will: · + Integrate multiple intelligence sources to develop products, recommendations, and inform priorities for the orga ...


  • Peraton Arlington, United States

    About Peraton Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deli ...


  • STEMBoard Arlington, United States

    STEMBoard · STEMBoard is an award-winning woman-owned small business specializing in professional advisory services for elite organizations. · View company page · Currently hiring an Industrial Control System Cyber Threat Intelligence Analyst for its Federal Strategic Cyber pr ...


  • Peraton Arlington, United States Full time

    Responsibilities · Peraton is currently hiring Sr-level Industrial Control System Cyber Threat Intelligence Analyst for its Federal Strategic Cyber programs. · Location: Arlington, VA. (Hybrid: Remote - 50% / On-site - 50%) · In this role, you will:Fuse multiple intelligence sour ...


  • Peraton Arlington, United States Full time

    Responsibilities · Peraton is currently hiring an experienced Industrial Control System Cyber Threat Intelligence Analyst for its Federal Strategic Cyber programs. · Location: Arlington, VA. (Hybrid: Remote - 50% / On-site - 50%) · In this role, you will:Fuse multiple intelligenc ...


  • Peraton Arlington, United States

    Responsibilities: · Peraton is currently hiring Sr-level Industrial Control System Cyber Threat Intelligence Analyst for its Federal Strategic Cyber programs. · Location: Arlington, VA. (Hybrid: Remote - 50% / On-site - 50%) · In this role, you will: · Fuse multiple intellige ...


  • Peraton Arlington, United States

    About Peraton Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deli ...


  • Agile Defense, Inc. Arlington, United States

    At Agile Defense we know that action defines the outcome and new challenges require new solutions. That's why we always look to the future and embrace change with an unmovable spirit and the courage to build for what comes next. Our vision is to bring adaptive innovation to suppo ...