Incident Forensics Specialist

As a member of the Incident Forensics Team perform the following tasks: Perform incident response for cyber security incidents Make preparations to effectively handle cyber incidents Act as an escalation point to support security monitoring activities Collect and analyze pertinent data to support security investigations Work with System Owners and administrators to effectively contain cyber incidents, eradicate threats, and recover from cyber incidents Coordinate and track ongoing remediation efforts with System Owners and labs/offices Develop, update, communicate, and retain Standard Operating Procedures (SOPs) Coordinate with administrators and technical staff to contain cyber incidents Perform Digital Media Analysis Perform Quality Assurance of incident response analysis and work products Monitor the incident queue and work with responders to regularly update all active cases Develop After Action Reports Develop, capture, and deliver summary metrics

Skills
1. Cybersecurity Operations
2. Infrastructure Security Management

Must have an Active TS Clearance and be able to pass a full background check and drug screen