Edgewater Federal Solutions
Senior Incident Response Analyst
Edgewater Federal Solutions, Washington, District of Columbia, us, 20022
Overview:
Position Overview:Edgewater Federal Solutions is currently seeking a Senior Incident Response Analyst to provide advanced Incident Response expertise and support to maximize cyber fusion throughout the Clients SOC, ensuring the Clients infrastructure and operations remain safe and secure from the full spectrum of cyber threats. The Senior Incident Response Analyst will directly support Client SOC teams by providing industry-leading incident response and forensics support to ongoing and significant incidents. Additionally, the Senior Incident Response Analyst must be skilled in related disciplines including threat hunting, forensics, and malware analysis, and be able to integrate these skills to assist in the closure of cybersecurity incidents. The Senior Incident Response Analyst will serve as a senior technical member of the Clients SOC and will be relied upon to address and remediate the most technical aspects of cybersecurity incidents that arise. This is a full-time position located in Washington, D.C. that will be onsite Mondays through Thursdays and remote on Fridays.Responsibilities:Responsibilities include:Lead one or more functional security teams and support the development of staff schedules and staffing forecasts.Ensure shift members follow appropriate incident escalation and reporting procedures.Provide prompt and efficient support through front-line telephone and email communication.Contribute to generating responses to crisis or urgent situations to mitigate immediate and potential threats.Accept and respond to government technical requests through the Clients ticketing system for advanced subject matter expert technical investigative support.Create duplicates of evidence using Client supplied procedures and tools to ensure the original evidence remains unaltered.Analyze forensic artifacts of various operating systems to identify intrusion elements and root causes.Perform live forensic analysis based on SIEM data and perform filesystem timeline analysis for inclusion in forensic reports.Extract deleted data using data carving techniques and collect and analyze data from compromised systems using EDR agents and custom scripts.Perform static and dynamic malware analysis to discover indicators of compromise and analyze memory images using Judiciary tools.Write comprehensive forensic reports and malware analysis reports.Support the development of Deliverables including Incident Reports, Image Duplications, Deleted Files, Forensics Reports, and Malware Analysis Reports
Qualifications:Requirements:Minimum of 7 years of related experience in incident response or cybersecurity.Experience with IT Service Management ticketing systems (HEAT or ServiceNow preferred).Familiarity with Security Information and Event Management (SIEM) systems.Expert knowledge of Splunk ES and strong familiarity with Splunk SOAR.Experience with Endpoint Detection and Response (EDR) agents such as Crowdstrike.Knowledge of Agile Scrum project management methodology.Strong understanding of cloud-based and non-cloud-based applications such as Microsoft Azure, Microsoft O365, Microsoft Active Directory, and Cloud Access Security Brokers.Proficiency in using forensic tools and methodologies, including SIEM, Splunk, and Volatility.Excellent written and verbal communication skills with the ability to write detailed forensic and malware analysis reports.Must possess at least ONE (NOT all) of the stated certifications:GCIA certificationGCIH certificationGSEC certificationGMON certificationSecurity+ certificationCertified Splunk Core Power UserBachelors degree in computer science, information technology, cybersecurity, or related field.For badging purposes, US citizenship is required.
About Us:Edgewater Federal Solutions is a privately held government contracting firm located in Frederick, MD. The company was founded in 2002 with the vision of being highly recognized and admired for supporting customer missions through employee empowerment, exceptional services and timely delivery. Edgewater Federal Solutions is ISO 9001, 20000-1, 270001 certified, appraised at CMMI Level 3 Maturity for Development and Services, and has been named in the Top Workplaces in the Greater Washington Area Small Companies for 2018 through 2024.It has been and continues to be the policy of Edgewater Federal Solutions to provide equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, marital status, veteran status, and/or other statuses protected by applicable law.status protected by applicable law. #LI-SW1
Position Overview:Edgewater Federal Solutions is currently seeking a Senior Incident Response Analyst to provide advanced Incident Response expertise and support to maximize cyber fusion throughout the Clients SOC, ensuring the Clients infrastructure and operations remain safe and secure from the full spectrum of cyber threats. The Senior Incident Response Analyst will directly support Client SOC teams by providing industry-leading incident response and forensics support to ongoing and significant incidents. Additionally, the Senior Incident Response Analyst must be skilled in related disciplines including threat hunting, forensics, and malware analysis, and be able to integrate these skills to assist in the closure of cybersecurity incidents. The Senior Incident Response Analyst will serve as a senior technical member of the Clients SOC and will be relied upon to address and remediate the most technical aspects of cybersecurity incidents that arise. This is a full-time position located in Washington, D.C. that will be onsite Mondays through Thursdays and remote on Fridays.Responsibilities:Responsibilities include:Lead one or more functional security teams and support the development of staff schedules and staffing forecasts.Ensure shift members follow appropriate incident escalation and reporting procedures.Provide prompt and efficient support through front-line telephone and email communication.Contribute to generating responses to crisis or urgent situations to mitigate immediate and potential threats.Accept and respond to government technical requests through the Clients ticketing system for advanced subject matter expert technical investigative support.Create duplicates of evidence using Client supplied procedures and tools to ensure the original evidence remains unaltered.Analyze forensic artifacts of various operating systems to identify intrusion elements and root causes.Perform live forensic analysis based on SIEM data and perform filesystem timeline analysis for inclusion in forensic reports.Extract deleted data using data carving techniques and collect and analyze data from compromised systems using EDR agents and custom scripts.Perform static and dynamic malware analysis to discover indicators of compromise and analyze memory images using Judiciary tools.Write comprehensive forensic reports and malware analysis reports.Support the development of Deliverables including Incident Reports, Image Duplications, Deleted Files, Forensics Reports, and Malware Analysis Reports
Qualifications:Requirements:Minimum of 7 years of related experience in incident response or cybersecurity.Experience with IT Service Management ticketing systems (HEAT or ServiceNow preferred).Familiarity with Security Information and Event Management (SIEM) systems.Expert knowledge of Splunk ES and strong familiarity with Splunk SOAR.Experience with Endpoint Detection and Response (EDR) agents such as Crowdstrike.Knowledge of Agile Scrum project management methodology.Strong understanding of cloud-based and non-cloud-based applications such as Microsoft Azure, Microsoft O365, Microsoft Active Directory, and Cloud Access Security Brokers.Proficiency in using forensic tools and methodologies, including SIEM, Splunk, and Volatility.Excellent written and verbal communication skills with the ability to write detailed forensic and malware analysis reports.Must possess at least ONE (NOT all) of the stated certifications:GCIA certificationGCIH certificationGSEC certificationGMON certificationSecurity+ certificationCertified Splunk Core Power UserBachelors degree in computer science, information technology, cybersecurity, or related field.For badging purposes, US citizenship is required.
About Us:Edgewater Federal Solutions is a privately held government contracting firm located in Frederick, MD. The company was founded in 2002 with the vision of being highly recognized and admired for supporting customer missions through employee empowerment, exceptional services and timely delivery. Edgewater Federal Solutions is ISO 9001, 20000-1, 270001 certified, appraised at CMMI Level 3 Maturity for Development and Services, and has been named in the Top Workplaces in the Greater Washington Area Small Companies for 2018 through 2024.It has been and continues to be the policy of Edgewater Federal Solutions to provide equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, gender, sexual orientation, national origin, age, disability, marital status, veteran status, and/or other statuses protected by applicable law.status protected by applicable law. #LI-SW1