Cyber Threat Analyst - Tier 2 Shift Lead

Position Title: Cyber Threat Analyst-Tier 2 Shift Lead

Location: Ashburn, VA

Clearance: Top Secret

We are an employee-centric company that truly appreciates our team members and their value to our customers and the missions they support. We pride ourselves on being forward-leaning thinkers and fostering teams that are and continue to be technically proficient and technically capable across a comprehensive range of cyber mission areas. OneZero full-time employees receive an extremely competitive benefits package that includes health/dental/vision/life insurance plans, 401K with company matching, PTO & paid holidays, employee referral program, and educational assistance. Additional details can be found on our website at: https://www.onezerollc.com/careers/

Shift schedule: 7pm-7am, Thurs-Sat, every other Wednesday.

Responsibilities

• Utilize state of the art technologies such as Endpoint Detection & Response tools, log analysis (Splunk) and possibly network forensics (full packet capture solution) to perform hunt
  and investigative activity to examine endpoint and network-based data.
  Conduct log analysis and triage in support of incident response.
  Recognize attacker and APT activity, tactics, and procedures as indicators of compromise (IOCs) that can be used to improve monitoring, analysis and incident response.
  Develop and build security content, scripts, tools, or methods to enhance the incident investigation processes.
  Lead Incident Response activities and mentor junior SOC staff.
  Work with key stakeholders to implement remediation plans in response to incidents.
  Effectively investigative and identify root cause findings then communicate findings to stakeholders including technical staff, and leadership.
  Flexible and adaptable self-starter with strong relationship-building skills
  Strong problem solving abilities with an analytic and qualitative eye for reasoning
  Ability to independently prioritize and complete multiple tasks with little to no supervision

Qualifications

In addition to specific security clearance requirements all US Customs and Border Protection employees for the
Department of Homeland Security are required to obtain a Full Favorable Background Investigation (B.I.) Suitability Determination to support this program.
Bachelors degree in Computer Science, Engineering, Information Technology, Cyber Security, or related field.
Minimum of 7 years of professional experience in incident detection, response and remediation.
Minimum of five (5) but (7) preferred years of specialized experience in one or more of the following areas:

Email security
Digital media forensic
Monitoring and detection
Incident Response
Vulnerability assessment and pen test
Cyber intelligence analysis

Must have at least the SANS or CCNA certification.
Extensive experience analyzing and synthesizing information with other relevant data sources, providing guidance and mentor-ship to others in cyber threat analysis and operations,
evaluating, interpreting, and integrating all sources of information, and fusing computer network attack analyses with counterintelligence and law enforcement investigations.

Must have 1 of the J3 Certifications

Tier 2 (Monitoring):
GCIA - Intrusion Analyst
GREM - Reverse Engineering Malware
GPPA - Perimeter Protection Analyst
GISF - Security Fundamentals
"GXPN - Exploit Researcher
and Advanced Penetration Tester"
GWEB - Web Application Defender
GNFA - Network Forensic Analyst
GMON - Continuous Monitoring Certification
OSCP (Certified Professional)
OSCE (Certified Expert)
OSWP (Wireless Professional)
OSEE (Exploitation Expert)
SEI (Software Engineering Institute)
CCSP - Certified Cloud Security Professional
"CISSP - Certified
Information Systems Security"
CCNA Security
CCNP Security
CEH - Certified Ethical Hacker
LPT - Licensed Penetration Tester
ECSA - EC-Council Certified Security Analyst
ENSA - EC-Council Network Security Administrator
CNDA - Certified Network Defense Architect
ECSS - EC-Council Certified Security Specialist
ECSP - EC-Council Certified Secure Programmer
ECES - EC-Council Certified Encryption Specialist
Cyber Analyst Couse

OneZero Solutions is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.