Tier 3 Incident Response Senior Analyst

Overview

RMC is hiring a Tier 3 Incident Response Senior Analyst to support an active government contract in Quantico, Virginia, providing defensive cyberspace operations and Cyber Security Service Provider (CSSP) functions. This position will support the government's mission to deny, disrupt, and degrade adversaries and attempts to disrupt, exploit and attack the information technology (IT) services provided to network users.

• Collect and analyze network and host artifacts from a variety of sources to include logs, system images and packet captures to characterize activity, determine root cause, operational impact, and enable rapid remediation and mitigation of cyber threats within the Enterprise Network through the investigation process
• Conduct forensic analysis of device timeline, device memory, file systems, and packet captures (pcap) – Digital Forensics & Incident Response (DFIR)
• Manage and document cyber defense incidents from initial detection through final resolution
• Perform quality assurance on routine cyber incident reporting to ensure accuracy and compliance to policies and procedures
• Make recommendations for alert tuning and creation of new detection use cases from information gathered during response to new techniques observed on the network
• Mentor junior analysts and guide them through the investigation process as necessary
• Develop and refine curriculum for the supported customer s Incident Response Course
• Assist in instructing an Incident Response Course

• Three years of incident response experience
• Active TS/SCI eligibility is required. Applicant selected will be subject to security investigation(s) and must maintain eligibility requirements for access to classified information. Candidate can begin supporting this position with a fully adjudicated DoD Secret clearance
• Associate's degree in Computer Science, Information Technology, Information Systems, or Computer Engineering, OR five (5) years of relatable work experience
• DoD 8570 IAT Level II certification
• DoD 8570 CSSP Incident Responder certification, or the ability to obtain within 180 days

M-F, 5 X 8, between 7:00 am EST and 5:00 pm EST, normally not to exceed 40 hours per week. This position may require extended or non-standard hours occasionally to support major cyber incidents. This position is considered essential and may be required to report during hazardous weather, power outages, fuel shortages, pandemics, and other emergencies.

RMC offers career growth opportunities, training, certification support, and an emphasis on employee development. The package may include relocation assistance, paid vacation, holidays, healthcare plans, pet insurance, and a 401K plan.

Salary is determined by location, education, knowledge, skills, competencies, experience, and contract-specific requirements. The current salary range for this position is $ to $ annually.