Apply on Employer Site

ARSIEM Corporation · 3 months ago

Incident Handler Tier 2

Monterey, CA

Full-time

Onsite

Mid Level

$98K/yr - $109K/yr

3+ years exp

ARSIEM Corporation is committed to providing reliable and cutting-edge technical solutions to government clients across the United States. They are seeking a motivated individual for the role of Incident Handler Tier 2, responsible for supporting cybersecurity incident response processes and working in a Cyber Security Operations Center (CSOC).

Cyber SecurityEmbedded SoftwareEnterprise ApplicationsSoftwareSoftware Engineering

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Provide support to a U.S. Navy Security Operations Center (SOC)

Review trouble tickets generated by Tier 1

Leverage emerging threat intelligence (Indicators of Compromise, updated rules, etc.) to identify affected systems and the scope of the attack

Review and collect asset data (logs, configurations, running processes, etc.) on these systems for further investigation

Determine and direct remediation and recovery efforts

May manage and configure security monitoring tools (SIEM, IDS, Firewall, Access Control Lists, etc.) to mitigate existing threats/vulnerabilities

Qualification

Incident detectionResponseMalware analysisCyber forensicsTCP/IP protocolsVulnerability AssessmentIntrusion PreventionDetectionAccess ControlAuthorizationPolicy EnforcementApplication SecurityProtocol AnalysisFirewall ManagementIncident ResponseEncryptionWeb filteringAdvanced Threat ProtectionSoft skills

Required

At least three (3) years of professional experience in incident detection and response, malware analysis, or cyber forensics

A bachelor's degree in Computer Science, Engineering, Information Technology, Cybersecurity, or related field

Extensive experience working with various security methodologies, standard operating procedures, processes, and workflows

Advanced knowledge of TCP/IP protocols

Experience configuring and implementing various technical security solutions

Extensive experience providing analysis and trending of security log data from a large number of heterogeneous security devices

Must possess knowledge of the following areas related to cybersecurity: Vulnerability Assessment, Intrusion Prevention and Detection, Access Control and Authorization, Policy Enforcement, Application Security, Protocol Analysis, Firewall Management, Incident Response, Encryption, Web filtering, and Advanced Threat Protection

This position requires an active Top Secret clearance

You must be a US Citizen for consideration