Cybersecurity Incident Response Team (CIRT) Analyst

ASRC Federal NetCentric Technology seeks a daily on-site Cybersecurity Incident Response Team (CIRT) Analyst in Alexandria, Virginia to support one of our Cybersecurity Support Services contracts. This onsite position is responsible for containing, responding to, and eradicating threats and other malicious activity. This position will help maintain and improve cybersecurity incident response capabilities as well as coordinate or participate in high-priority investigations, identifying incident response improvements, and preparing reports for management.

Key Responsibilities:

• Perform technical incident response investigations into cybersecurity related events and incidents
• Determine the nature, scope, and cause of incidents including root cause analysis
• Identify corrective actions and aid in the containment, eradication, and recovery of a given event and incident
• Track incident response, corrective measures taken, recommendations, and remediation activities; complete incident reports for investigations as needed; provide or contribute to weekly report of events and incidents
• Create and maintain incident response SOP in accordance with CJCSM 6510.01B, NIST SP 800-61R2, DoD regulations, and industry best practices
• Respond to and investigate cyber events should an incident occur after regular business hours

Required Qualifications:

• Bachelor's Degree in computer science or related field
• U.S. Citizenship and an active Secret Clearance (required) with the ability to obtain and maintain a Top-Secret Clearance.
• Active DoD 8570 IAT Level II certification or greater, including at least one of the following certifications in good standing: CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, SSCP, CASP+CE, CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, or CCSP.
• Active DoD 8570 CSSP Incident Responder certification a plus, including at least one of the following certifications in good standing: CEH, CFR, CCNA Cyber Ops, CHFI, CySA+, GCFA, GCIH, SCYBER, or PenTest+

• 7+ years in Information Technology or Information Security with 3+ years performing Cybersecurity Incident Response
• Knowledge of Incident Response Handling Procedures (NIST SP 800-61)
• Familiarity with cyber adversary tactics and frameworks (such as ATT&CK and D3FEND)
• Knowledge of one or more of the following cybersecurity tools:
  • Trellix/ESS
  • Tanium
  • Microsoft Defender Endpoint
  • Beyond Trust
  • Splunk

Why ASRC?

As a wholly owned subsidiary of Arctic Slope Regional Corporation, an Alaska Native Corporation, we are inspired by the Iñupiat culture. We embrace stewardship and the idea of using every resource effectively; teamwork when striving to achieve goals and building a collaborative environment; integrity in adhering to high moral principles and professional standards; respect in welcoming and regarding the differing opinions, experiences, rights and traditions of others as we build a diverse and inclusive workplace; accountability in that we meet our commitments and take responsibility for our results; and continuous improvement, always striving to make things better, raising the bar and staying humble.

Purpose-Driven Careers: Join a company recognized as a:

• Certified Great Place to Work
• Military Times' Best for Vets Employer
• Military.com's Top 25 Veteran Employer

Comprehensive Benefits:

• Insurance Coverage ( medical, dental, vision, life insurance, and short-term/long-term disability).
• Paid Leave (Military, Holidays and Family)
• Retirement Savings (401K)
• Corporate Incentives (Employee Referral Bonuses, After 90 days of regular full-time employment employees are eligible for Degree-Tuition Reimbursement, Professional Conference Registration Fee Reimbursement and Professional Certification Reimbursement)

Centers of Excellence : We established the Centers of Excellence to build, leverage and grow our technology capabilities, best practices and offer professional development for our technical teams. They contain many Communities of Practice which are forums that offers a platform to share ideas, best practices, innovations, and to collaborate with technical peers.

Embark on a career with ASRC Federal, where your growth, purpose, and well-being are at the forefront of what we do!