- Coordinate and implement tasks, performing analysis, and building/documenting response activities required during cyber security incident response, to include but not limited to actions such as implementing containment measures, IP blocks, domain blocks, and disabling user accounts on direction of the Government.
- Coordinates with Security and Installations Directorate (SI) Office of Counterintelligence (SIC), Insider Threat Office (SIII), in addition to other law enforcement and counter intelligence personnel as required to perform advanced investigation and triage of incidents;
- Collaborates with appropriate authorities in the production of security incident reports;
- Categorizes incidents and events;
- Coordinates with other contracts, organizations, activities, and other services as appropriate to ensure incidents are properly reported, contained, and eradicated;
- Coordinates with other contracts, organizations, activities, and other services as appropriate to de-conflict blue / red team activity with open incidents/events;
- Coordinates with other contracts, organizations, activities, and services to ensure NGA recovers from an incident/event;
- Builds timelines, documents, briefings, and other products as required to inform stakeholders of incident response actions, analysis, and the impact of both adversary activity and blue force response actions.
- Documents actions taken and analysis in the authorized ticketing system to a level of detail where the actions taken and analysis are capable of being systematically reconstructed.
- Develops and when approved by the Government generates and updates reports in the Joint Incident Management System (JIMS), Incident Case Management System (ICMS), and/or other authorized reporting systems as directed;
- Develops, maintains, sustains, and when properly authorized by the Government executes custom scripts, tools, and capabilities to collect and analyze data, and to respond to incidents/events;
- Performs digital media analysis on host, server, and network data as required to analyze and respond to an incident, to include but not limited to volatile and non-volatile memory and/or system artifact collection and analysis;
- Develops and identifies indicators of compromise to send to Cybersecurity stakeholders and other Contract Services;
- Provides adversary attribution;
- Performs malware analysis and signature development;
- Coordinate with CSOC Tier 1 and 2 services to remediate all discrepancies and provide recommendations to prevent reoccurrence.
- Bachelors Degree and or 6 years' experience in Cyber Security (CSOS)
- Active TS/SCI, ability to obtain a polygraph
- DoDD and DoD M IAT Level II and CSSP Incident Responder. Provides input to and coordinates with all applicable stakeholders to develop and deliver the daily CSOC Significant Activity Report, the daily CSOC Operations Update, and the Weekly CSOC Status Report;
- Serve as C-IRT members as required and serve under the direct control of, and take direction from, the Government C-IRT Commander;
- Develop and coordinate courses of action with various Government and contract stakeholders, and when properly authorized by the Government, execute Defensive Cyberspace Operations-Internal Defensive Measures on behalf of the NGA on NGA networks and systems;
- Performs digital media analysis and malware reverse engineering on host, server, and network data as required to analyze and respond to an incident, to include but not limited to volatile and non-volatile memory and/or system artifact collection and analysis.
- When properly authorized by the Government, execute custom scripts, tools, and capabilities to collect and analyze data, and to respond to incidents/events;
- Develops, documents, and provides to the Government incident investigation reports which include sufficient information to document the entire lifecycle of the incident and the response, including but not limited to adversary and friendly forces activity, host and network analysis, timelines, and recommendations for corrective actions, recommendations for new Tactics, Techniques, and Procedures (TTP) and other recommendations as appropriate, within 30 days of C-IRT stand-down;
- Conduct Quality Control reviews of a percentage closed CSOC Tier 2 tickets each week to ensure proper analysis, categorization, documentation, and notification
-
Operations Specialist
4 days ago
George Mason University Fairfax, United StatesOperations Specialist · Fairfax, VA · Classified Staff · Opening on: Jan · Department: · Information Technology · Classification: · Computer Ops Tech 1 · Job Category: · Classified Staff · Job Type: · Full-Time · Work Schedule: · Full-time (1.0 FTE, 40 hrs/wk) · Loc ...
-
Operations Specialist
1 week ago
George Mason University Fairfax, United States· Operations Specialist · Fairfax, VA · Classified Staff · Opening on: Jan · Add to favorites · Favorited · View favorites · Department: Information Technology · Classification: Computer Ops Tech 1 · Job Category: Classified Staff · Job Type: Full-Time · Work Schedule: Full-tim ...
-
IT Operations Specialist
1 week ago
General Dynamics Information Technology Falls Church, United StatesReq ID: RQ174506 · Type of Requisition: Regular · Clearance Level Must Be Able to Obtain: Secret · Job Family: Systems Administration · Skills: · Documentations,Information Technology (IT) Infrastructure,Information Technology Operations,Microsoft Windows,Technical Support · Cert ...
-
IT Operations Specialist
1 week ago
General Dynamics Information Technology Falls Church, United StatesGECOS IT Operations Specialist We are GDIT. The people supporting and securing some of the most complex government, defense, and intelligence projects across the country. We ensure today is safe and tomorrow is smarter. Our work has meaning and impact on the world around us, but ...
-
IT Operations Specialist
2 days ago
General Dynamics Information Technology Falls Church, United StatesReq ID: RQ174506 · Type of Requisition: Regular · Clearance Level Must Be Able to Obtain: Secret · Job Family: Systems Administration · Skills: · Documentations,Information Technology (IT) Infrastructure,Information Technology Operations,Microsoft Windows,Technical Support · Cert ...
-
Lead Operations Specialist
1 week ago
George Mason University Fairfax, United States· Lead Operations Specialist · Fairfax, VA · Classified Staff · Opening on: Jan 4 2024 · Add to favorites · Favorited · View favorites · Department: Information Technology · Classification: Computer Ops Tech 2 · Job Category: Classified Staff · Job Type: Full-Time · Work Schedul ...
-
Cyber Security Operations Specialist
1 day ago
SITEC Consulting LLC Fairfax, United StatesPosition Overview: · Candidate will provide CSOC Tier 3 services, which is 24x7x365 coordination, execution, and implementation of all actions required for the containment, eradication, and recovery measures for events and incidents. CSOC Tier 3 services includes malware and impl ...
-
Vehicle Operations Support Specialist II
2 weeks ago
Cox Communications Fredericksburg, United StatesManage account relationships, maintain effective communications, and ensure customer requirements are met. Work with commercial clients to relay information regarding the condition of their car and obtain required approvals to move forward with recon Support Specialist, Operation ...
-
Vehicle Operations Support Specialist II
5 days ago
Cox Communications Fredericksburg, United StatesCompanyCox Automotive - USAJob Family GroupVehicle OperationsJob ProfileVehicle Operations Support Specialist IIManagement LevelIndividual ContributorFlexible Work Option No remote option; must work at a specified Cox locationTravel %NoWork ShiftDayCompensationHourly base pay rat ...
-
Property Administrative Specialist
4 days ago
Marriott International, Inc Mosby, United StatesAdditional Information Supporting Sales and Executive Members · Job Number · Job Category Administrative · Location Falls Church Marriott Fairview Park, 3111 Fairview Park Drive, Falls Church, Virginia, United States VIEW ON MAP · Schedule Full-Time · Located Remotely? N · Reloc ...
-
Inova Health System Fairfax, VA, United States Part timeInova Health System is seeking a Registered Nurse (RN) Outpatient Surgery for a nursing job in Fairfax, Virginia. · Job Description & Requirements · Specialty: Outpatient Surgery · Discipline: RN · Start Date: ASAP · Duration: Ongoing · Shift: days · Employment Type: Staff · Inov ...
-
HUMINT Targeting Specialist
1 week ago
Invictus International Consulting, LLC Washington, United StatesTitle: HUMINT Targeting Specialist · Location: Washington, DC · Clearance: TS/SCI w/CI polygraph · Responsibilities: · Provide detailed all-source intelligence products to support HUMINT, including in-depth analysis of the topics, regions or technologies, in support of operationa ...
-
Clinical Supervisor
1 week ago
Pediatric Specialists of Virginia Falls Church, United StatesOverview · Caring for children requires specialized training and experience to understand the complexity of their health problems and to recommend the best treatment approaches in a developmental context. The specialists at Pediatric Specialists of Virginia are experts at providi ...
-
clinical informatics specialist
1 week ago
Resource Logistics, Inc. Fairfax, VA, United StatesClinical Informatics Specialist · Virginia · Contract · Remote work · Job Title/Role · Mandatory Skills · The Clinical Informatics Specialist plays a crucial role in bridging the gap between healthcare operations and technology. · They are responsible for ensuring seamless in ...
-
Inova Health System Fairfax, United StatesJob Description · Inova Health System is seeking a Registered Nurse (RN) Clinical Coordinator, Oncology for a nursing job in Fairfax, Virginia. · Job Description & RequirementsSpecialty: Oncology · Discipline: RN · Start Date: ASAP · Duration: Ongoing · Shift: days · Employment T ...
-
BMT Pharmacy Clinical Specialist PRN
1 week ago
Inova Falls Church, United StatesJob Description · Inova Fairfax Hospital is seeking a dedicated PRNPharmacy Clinical Specialist- Oncology Bone Marrow Transplant to join the team. · The Pharmacy Clinical Specialist ensures safe, appropriate, and cost-effective medication therapies are made available for patien ...
-
Periop Support Specialist Fulltime
2 days ago
Inova Health System Falls Church, United States Full timeThe Perioperative Support Specialist assists with patient care while retrieving and delivering requested supplies, instruments, and equipment to the operating rooms as directed by the nursing staff. The specialist communicates effectively and works cooperatively with others. The ...
-
Part Time AP Specialist
1 week ago
Creative Financial Staffing Fairfax, United States Part timeAbout the Company and Opportunity: · Our client is a well-known government contractor with contracts supporting different cabinet departments · Opportunity to work with highly experienced team · Our client needs additional support due to the current workload · Part Time AP Specia ...
-
Accounting Specialist
5 days ago
Hirekeyz Inc. Fairfax, United StatesRole: Accounting Specialist · Location: Fairfax, VA, 22033 Onsite · Fulltime · We have partnered with a large engineering firm in the Fairfax, VA area to provide them with an Accounting Specialist. Please review the below description and let us know if you are interested. · P ...
-
Inova Health System Fairfax, VA, United StatesInova Health System is seeking a Registered Nurse (RN) Clinical Coordinator, Oncology for a nursing job in Fairfax, Virginia. · Job Description & Requirements · Specialty: Oncology · Discipline: RN · Start Date: ASAP · Duration: Ongoing · Shift: days · Employment Type: Staff · In ...
Cyber Security Operations Specialist - Fairfax, United States - SITEC Consulting LLC
Description
Position Overview:
Candidate will provide CSOC Tier 3 services, which is 24x7x365 coordination, execution, and implementation of all actions required for the containment, eradication, and recovery measures for events and incidents.
When a CIRT is stood up, all contractors in support of CSOC Tier 3 services will be under the direct control of, and take direction from, the Government CIRT Commander.
While not in a period of incident response, the Contractor shall conduct continuous exercises and dry runs to improve response outcomes in the event of a cyber-incident.
All Contractor personnel performing CSOC Tier 3 services shall have or obtain, within six months of start, a certification that is compliant with DoDD and DoD M IAT Level III and CSSP Incident Responder.
Job Duties:
Job Requirements:
