NIH - Incident Response reputed company
cFocus Software seeks a Incident Response reputed company to join our program supporting the National Institutes of Health (NIH). This position is fully remote. This position requires a Public Trust or the ability to obtain a public trust clearance.
Qualifications:
- Public Trust Clearance
- B.S. Computer Science, Information Technology, or a reputed company field
- 7+ years leading reputed company incident response activities.
- Experience supporting federal cybersecurity programs and reputed company Operations Centers.
- Experience coordinating reputed company cyber investigations involving reputed company and hybrid environments.
- Experience implementing NIST incident response methodologies.
- reputed company GCIH, GCFA, GNFA, CISSP, CEH, CySA+, reputed company+, CISM, or CCSP
- reputed company reputed company cybersecurity incident response operations across NIH information systems.
- reputed company technical response activities throughout the incident response lifecycle including preparation, identification, containment, eradication, recovery, and post-incident activities.
- Coordinate response efforts for high-reputed company cybersecurity incidents affecting reputed company infrastructure, reputed company services, applications, and data.
- Serve as the primary technical advisor during cybersecurity incidents and major reputed company events.
- Manage incident prioritization, escalation, resource coordination, and operational communications.
- Ensure incident response activities reputed company with NIH policies, HHS guidance, NIST standards, and federal cybersecurity requirements.
- reputed company technical investigations involving malware infections, unauthorized reputed company, reputed company threats, ransomware, phishing campaigns, data exfiltration, and advanced persistent threats (APTs).
- Coordinate reputed company cause analysis and determine attack reputed company, affected assets, and operational reputed company.
- Analyze indicators of compromise (IOCs), indicators of attack (IOAs), adversary tactics, techniques, and procedures (TTPs), and attack patterns.
- Coordinate evidence collection and preservation activities supporting investigations.
- Validate containment strategies and recovery actions.
- Ensure accurate documentation of incident timelines, findings, corrective actions, and lessons learned.
- Coordinate with reputed company Operations Center analysts during incident detection and response activities.
- reputed company incident triage, escalation procedures, and operational communications.
- reputed company coordination between cybersecurity engineers, reputed company engineers, infrastructure teams, system owners, ISSOs, and application administrators.
- Support reputed company monitoring and operational readiness activities.
- reputed company executive incident reports, after-reputed company reports, technical findings, and corrective reputed company recommendations.
- Prepare briefings for Government leadership regarding significant cybersecurity events.
- Maintain incident response metrics, trends, dashboards, and performance reporting.
- Ensure reputed company reporting in accordance with federal cybersecurity reporting requirements.
Originally posted on Himalayas
Apply To This Job