Incident Response Analyst - Merritt Island, United States - MartinFed

Description

Job Description

COMPANY OVERVIEW

Founded in 2007 in Huntsville, AL, MartinFed provides the U.S. government with customer-focused, performance-based solutions using technology and an empowered workforce as an engine to drive its customers' missions. Our goal is to attract the best and brightest within their field.

We invest in our people because they are our greatest asset. They cultivate our purpose, embody and reflect our core values, and define our culture. MartinFed's core values that set us apart are the following:

• Be Driven - We are fueled by the hunger to learn more and do more.
• Be Curious - We engage in continuous improvement - never accepting the status quo.
• Be Humble - We seek honest feedback to strengthen our relationships.
• Pursue Excellence - We strive to achieve extraordinary results and do not settle for mediocrity.

Strive for excellence and consider joining our growing team today

JOB OVERVIEW

MartinFed has an opening for an Incident Response Analyst to join our team of talented and diverse individuals. The Incident Responder (IR) conducts incident response activities focused on containment, eradication, and recovery. Supporting from incident confirmation through resolution, the Incident Responder coordinates activities with customer stakeholders and forensics professionals - reporting findings to include root cause and mitigation steps in compliance with applicable SOPs and Regulations.

ESSENTIAL FUNCTIONS

• Track, document, and report incidents from initial detection to final resolution in accordance with associated procedures and timelines.
• In response to initial identification and/or report of a cyber incident, perform initial incident triage, contain, mitigate and report.
• Respond to cyber incidents with the approved courses of action that focus on containment, eradication, and recovery.
• Analyze and correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation.
• Assist the customer's response to significant cyber incidents and providing oversight for this service.
• Collaborate and coordinate with other Security Operations Center and Forensics Leads.

QUALIFICATIONS

• United States Citizen with a DoD Secret Clearance or higher.
• Bachelor's Degree in Computer Science or related technical field.
• At least 2 years experience related to Digital Forensics & Incident Response (DFIR), Security Operating Center (SOC), or LEO DF Unit.
• At least 1 years' experience with technical writing, developing technical documents, and incident response reporting.
• Holds an intermediate level, industry recognized, certification (GCIH/GCFE/GCFA/GNFA//GREM/CFCE/CAWFE/EnCE/CCE).
• Strong experience with Unix/Linux system administration.
• Strong experience with Windows system administration.
• Strong experience analyzing various log formats such as those from endpoints, networking devices, and authentication services.
• Experience with forensic tooling (AXIOM, FTK, Arsenal Recon, Zimmerman Tools, X-Ways, Ghidra, IDA, Volatility, etc).
• Knowledge of common host-based forensic artifacts in multiple operating systems.
• Understanding of network architecture, common network protocols, and how threat actors can abuse them.
• Experience with cloud-based investigations, including Amazon AWS and Microsoft Azure.
• Strong scripting capabilities (Python, PowerShell, Bash, Shell).
• Knowledge of incident response methodologies and technologies.
• Understanding of current industry trends and emerging threats.
• Experience collaborating with dozens of different teams across a large and diverse environment.
• Strong oral, written, and presentation abilities.

DESIRED QUALIFICATIONS

• Master's Degree in Computer Science or related technical field.
• Deep knowledge related to the functionality of Windows OS, Mac OS-X, and Linux Operating systems and associated file systems (NTFS, HFS, ext, exFAT, etc).
• Knowledge of Windows based memory forensics, including internal structure, and what data can be recovered.
• Experience with analyzing raw packet capture.

PHYSICAL REQUIREMENTS & ENVIRONMENTAL CONDITIONS

• Inside office environment.
• Working on a computer for long periods of time.
• May involve long period of sitting at a desk.
• Work must be performed on-site at NASA Stennis Space Center.
• The work environment is fast-paced and sometimes involves extreme deadline pressures.

OTHER DUTIES

This job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.

MartinFed is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regards to race, color, religion, religious creed, gender, sexual orientation, gender identity, gender expression, transgender, pregnancy, marital status, national origin, ancestry, citizenship status, age, disability, protected Veteran Status, genetics or any other characteristics protected by applicable federal, state or local law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. In addition to federal law requirements, MartinFed complies with all applicable state and local laws governing nondiscrimination in all locations.

If you are a qualified individual with a disability or disabled veteran, you have the right to request a reasonable accommodation if you are unable or limited in your ability to use or access MartinFed's current openings as a result of your disability. You can request reasonable accommodations by calling Thank you for your interest in MartinFed.

Please Note: All positions at MartinFed are contingent upon passing both a background check and drug screening prior to a start date and are subject to random drug screenings during the employment period. In addition, MartinFed is an E-Verify employer.