This job is closed
We regret to inform you that the job you were interested in has been closed. Although this specific position is no longer available, we encourage you to continue exploring other opportunities on our job board.
Alpha Omega Integration - Vienna, VA
posted 2 months ago
About the position
The IT Cybersecurity Engineer will support the Security Operations Incident Response Team (SecOps IRT) by managing security incidents, conducting vulnerability analysis, and maintaining security documentation for public-facing systems. This role involves hands-on security support, incident response management, and collaboration with stakeholders to ensure timely resolution of security incidents. The engineer will also develop dashboards and reports to enhance incident response processes and provide technical expertise on emerging cybersecurity threats.
Responsibilities
- Manage all Incident Response tickets, including development, updates, and closure of tickets.
- Respond to security incidents following a pre-defined Service Level Agreement (SLA).
- Conduct log investigations and escalate incidents as needed.
- Complete after-action reports to ensure timely resolution of incidents.
- Create incident detection dashboards in Department SIEM and assist in developing SecOps IR processes.
- Analyze incidents/events to validate legitimacy and assess impact on government systems.
- Provide guidance and support during the incident response process.
- Communicate and collaborate with stakeholders on open tickets to track progress.
- Liaison with system owners and technical teams to assist in the mitigation process.
- Coordinate the completion of the IR after-action report (AAR) after every incident.
- Maintain detailed records of all incidents, actions taken, and outcomes.
- Demonstrate extensive knowledge in current and emerging cybersecurity threats.
Requirements
- 5+ years' experience working in a SOC and supporting VDP and VM tasks.
- Experience creating VDP workflows.
- Strong experience with ServiceNow Incident Response Module, including creating dashboards and widgets.
- Bug Cloud experience.
- Understanding of types of attacks and web application exploitations.
- Experience building incident response plans and playbooks.
- Ability to operate in various SIEM tools and provide recommendations for improvement.
- Proficiency in Splunk for building reports and dashboards.
- Log Management skills for developing processes and log consolidation.
- Forensics skills for identifying and investigating incidents and analyzing logs.
- Strong technical writing skills.
Nice-to-haves
- Bachelor's Degree in Computer Engineering or related field.
- Experience with ServiceNow.
Benefits
- PTO including paid parental, military, and bereavement leave.
- Eleven (11) paid Federal holidays, five of which are floating holidays.
- Health and Dental Insurance with 100% employer paid premiums for employee coverage under the HDHP health plan.
- Life Insurance, STD/LTD term disability coverage with employer paid premiums.
- 401 (k) plan with a match that is 100% vested after two years of service.
- FSA/DFSA/HSA flexible benefit plans.
- Annual Tuition & Professional Development Reimbursement benefit.
