Job description

cFocus Software seeks a Incident Response Analyst (Tier 2) to join our program supporting the Administrative Office of the United States Courts (AOUSC). This position is Hybrid with the onsite location being in Washington, DC. This position requires a Public Trust clearance. Qualifications: • Active Public Trust clearance • B.S. Computer Science, Information Technology, or a related field • 3+ years of experience in an IR role. • 2+ years’ experience using Python and PowerShell scripts for decoding/decryption of obfuscated payloads. • 2 years of experience in performing live triage, log correlation, detection rule refinement, to include usage of Velociraptor, Splunk ES and Sentinel. • 1 year of experience in federal incident handling guidelines as specified in NIST CSWP-29: CSF, and NIST SP-800-61 Computer Security Incident Handling Guide. • Active SANS GCIH or GCIA certification

Requirements

Must-haves

Qualifications: • Active Public Trust clearance
B.S. Computer Science, Information Technology, or a related field
3+ years of experience in an IR role.
2+ years’ experience using Python and PowerShell scripts for decoding/decryption of obfuscated payloads.
2 years of experience in performing live triage, log correlation, detection rule refinement, to include usage of Velociraptor, Splunk ES and Sentinel.
1 year of experience in federal incident handling guidelines as specified in NIST CSWP-29: CSF, and NIST SP-800-61 Computer Security Incident Handling Guide.
Active SANS GCIH or GCIA certification

Nice-to-haves

None flagged.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

python

Platform: jazzhr
Effort: medium

Benefits

Benefits detected in the listing.

Pto