Incident Response Analyst at Edgewater… · Bethesda

Summary: Edgewater Federal Solutions, Inc. is a government contracting firm located in Frederick, MD, seeking an Incident Response Analyst to support a government contract. The role involves managing a 24x7x365 cybersecurity operations center, responding to alerts, and conducting incident response activities including tracking incidents and communicating with stakeholders. Responsibilities: - Manning a 24x7x365 cybersecurity operations center and responding to alerts, notification, communications and providing incident response activities such as tracking the incident, communication with stakeholders, remediation and recovery actions and reporting - Ensure reports are properly entered into the incident tracking - Expected to have knowledge of cybersecurity incidents, anomaly analysis, log analysis, digital forensics, common threat vectors and be able to comprehend reports and determine what additional action and response activities may be required to resolve an incident - Follow established SOP’s, policies and other procedures for escalation and notification of Federal Leadership and reporting Required Qualifications: - US Citizenship is required - BS in Computer Science, Information Management, Cyber Security, or related field (additional years of experience may be considered in lieu of education) - 1+ years of Cyber Security experience - Sound cyber security knowledge foundation, to include sufficient understanding of networking and application layer protocols - Knowledge of the cyber kill chain or other frameworks - Operational understanding of enterprise networking and security tools (firewalls, Antivirus, HIDS, IDS/IPS, proxy, WAF), Windows and Unix/Linux systems' operations - Knowledge of digital investigations and incident response processes, including detection, triage, incident analysis, remediation, and reporting - Experience creating and tracking investigations to resolution - Knowledge of information security, threats, attacks, vulnerabilities, techniques, and exploits - Ability to troubleshoot complex alerts and investigate to discover root cause - Strong written and verbal skills to effectively communicate at all levels in government and industry Preferred Qualifications: - Experience in some of the following: FireEye, Microsoft Defender, Phishing reporting tools, DLP solutions, Tenable, or other scanning tools - Experience in working with Cloud Platforms - Knowledge of basic Scripting and Windows PowerShell - Strong written and verbal skills to effectively communicate at all levels in government and industry Required Skills: Cybersecurity, Networking protocols, Application layer protocols, Cyber kill chain, Enterprise networking, Security tools, Firewalls, Antivirus, HIDS, IDS/IPS, Proxy, WAF, Windows systems, Unix/Linux systems, Digital forensics, Incident response, Incident detection, Incident triage, Incident analysis, Incident remediation, Incident reporting, Information security, Threat analysis, Vulnerability assessment, Exploit knowledge, Alert troubleshooting, Investigation tracking, Splunk SIEM, FireEye, Microsoft Defender, Phishing reporting tools, DLP solutions, Tenable, Cloud platforms, Scripting, Windows PowerShell Benefits: Paid Time Off & Holiday Pay, Medical Insurance, Dental Insurance, Vision Insurance, Disability, Life Insurance, and AD&D, Flexible Spending Accounts, Pre-Tax 401K and/or After-Tax Roth IRA (with employer matching contribution), Tuition and Technical Training Reimbursement, Exercise Reimbursement, Computer Reimbursement, Employee Assistance Program