Incident Responder

Overview

• Investigates, analyzes, and responds to cyber incidents within the network environment or enclave.
• Correlates incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation.
• Performs analysis of log files from a variety of sources (e.g., individual host logs, network traffic logs, firewall logs, and intrusion detection system [IDS] logs) to identify possible threats to network security.
• Performs cyber defense incident triage, including determining scope, urgency, and potential impact, identifying the specific vulnerability, and making recommendations that enable expeditious remediation.
• Performs real-time cyber defense incident handling (e.g., forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation) to support deployable Incident Response Teams (IRTs).
• Tracks and documents cyber defense incidents from initial detection through final resolution.
• Coordinates with intelligence analysts to correlate threat assessment data; coordinate incident response functions.

Bachelor's Degree in Computer Information Systems or Information Technology, Cybersecurity or Information Assurance or equivalent work experience of 5 or more years.

• GIAC Certified Incident Handler (GCIH)
• GIAC Certified Intrusion Analyst (GCIA)
• Windows Forensic Analysis (GCFE)