Tier 3 Incident Response Senior Analyst

Role Description

Sentar is hiring a Tier 3 Incident Response Senior Analyst who will be responsible for incident response activities throughout the Enterprise. This position will support an active government contract in Quantico, Virginia, providing defensive cyberspace operations and Cyber Security Service Provider (CSSP) functions. Additionally, this position will support the government's mission to deny, disrupt, and degrade adversaries’ abilities and attempts to disrupt, exploit and attack the information technology (IT) services provided to network users.

The selected applicant will perform a variety of activities including but not limited to:

• Collect and analyze network and host artifacts from a variety of sources to include logs, system images and packet captures to characterize activity, determine root cause, operational impact, and to enable rapid remediation and mitigation of cyber threats within the Enterprise Network through the investigation process.
• Manage and document cyber defense incidents from initial detection through final resolution.
• Perform quality assurance on routine cyber incident reporting to ensure accuracy and compliance to policies and procedures.
• Make recommendations for alert tuning and creation of new detection use cases from information gathered during response to new techniques observed on the network.
• Mentor junior analysts and guide them through the investigation process as necessary.
• Develop and refine curriculum for the supported customer’s Incident Response Course.
• Assist in instructing an Incident Response Course.
• Conduct forensic analysis of device timeline, device memory, file systems, and pcap (Digital Forensics & Incident Response - DRIR).

Schedule:

On‑site (no telework), M‑F 8 X 5, on‑call after hours and weekends approximately once every four weeks (occasional after hours phone call and possible recall to site – recall to site occurs very rarely). In extremis for priority mission requirements, any and all Tier 3 Incident Responders could be recalled – a rare occasion that we have not experienced since this contract began.

Clearance Level: TS/SCI eligibility

Education/

Experience:

Associate's degree in a Computer Science, Information Technology, Information Systems, or Computer Engineering field; OR five (5) years of relatable work experience.

• Voluntary Medical, Dental, Vision, with Health Savings or Flexible Spending Plan options
• Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options
• Group Term Life, Short-Term and Long-Term Disability is provided by Sentar to all qualifying employees
• Generous 401(k) match
• Competitive PTO plan that graduates quickly with years of service
• Other leave programs; holiday schedule along with bereavement, maternity, jury and military duty

Sentar is an affirmative action and equal opportunity employer M/F/Vets/Persons with Disabilities.