Incident Response Analyst (H)

Requisition #: INCID003469
Job Title: Incident Response Analyst (H)
Location: Camp Arifjan, Kuwait
Clearance Level: Active DoD - Top Secret SCI
Required Certification(s):
* This position requires candidates to adhere to DoD ‎8570.01-M. All candidates are required to maintain at least one (‎1) baseline certification and one (‎1) computing environment (CE) certification.
* Baseline Environment (BE) certifications cannot also be used as a Computing Environment (CE).
* The authorized certifications for this job title are listed as follows: IAT Level: CSSP Incident Responder Baseline: (One of the following required) CEH, CFR, CCNA Cyber Ops, CCNA-Security, CHFI, CySA+, GCFA, GCIH, SCYBER, PenTest+ CE: (One of the following required) GCIH (preferred), GCIA, GREM, GCFA, GDAT, GCWN, OSCP, OSCE, GSEC

_Selected applicants may be subject to a government security investigation
and must meet eligibility requirements for access to classified information.
_

SUMMRY
The Defensive Cyber Operations (DCO) division within the USARCC-SWA is looking
for a candidate with strong scripting abilities, experience with systems
security administration, and network security technologies. The Incident
Response Analyst will design, implement, automate, maintain, and optimize
measures protecting systems, networks, and information.
DUTIES
* Detect, document, and report potential or confirmed incidents and security issues.
* Analyze events utilizing Security Information Event Management (SIEM) systems, Big Data Analytics, and other supporting platforms or applications.
* Conduct Incident Handling actions in accord to established procedures.
* Staff, coordinate and perform Incident Response investigations.
* Conduct quality control of incidents and investigations to maintain compliance with applicable policies.
* Develop recommendations to enhance detection capabilities and implement mitigation measures in response to general or specific threats (attempted exploits, attacks, malware delivery, etc.).
* Design and integrate custom rules and reports within data collection platforms.
* Prepare technical summaries and briefings.
* Provide technical expertise regarding the defense of information systems and networks.
* Correlate event data to create situational awareness and trend analysis reports.
* Ability to troubleshoot servers and infrastructure equipment.
* Ability to assess networking requirements and provide solutions.
* Ability to make accurate and independent decisions under pressure.
* Experience with a customer service oriented company Excellent organizational, interpersonal, written, and verbal communication skills.
* Ability to perform comfortably in a fast-paced, deadline-oriented work environment.
* Ability to successfully execute many complex tasks simultaneously.
Qualifications

Education and Certifications
* Associate Degree or equivalent experience preferably in Computer Science or MIS, IS, Engineering or related field.
* One-year related experience can be substituted for one year of education if the degree is required.
* One year of related academic study above the high school level may be substituted for one year of experience up to a maximum of a ‎4-year bachelor's degree in a Business Information Systems discipline for three years general experience.
* This position requires candidates to adhere to DoD ‎8570.01-M. All candidates are required to maintain at least one (‎1) baseline certification and one (‎1) computing environment (CE) certification.
* Baseline Environment (BE) certifications cannot also be used as a Computing Environment (CE).
* The authorized certifications for this job title are listed as follows: IAT Level: CSSP Incident Responder Baseline: (One of the following required) CEH, CFR, CCNA Cyber Ops, CCNA-Security, CHFI, CySA+, GCFA, GCIH, SCYBER, PenTest+ CE: (One of the following required) GCIH (preferred), GCIA, GREM, GCFA, GDAT, GCWN, OSCP, OSCE, GSEC
Background Needed and Years of Experience
* At least three (‎3) years of practical experience working with various data (network and system) technologies, with a minimum of two of those years focused on information systems security incident handling and SIEM event analysis.
* Threat Intelligence and visualization technologies Visualization of quantitative (numerical) or qualitative information Excellent interpersonal, organization, writing, communicating, and briefing skills.
* Excellent analytical and problem-solving skills.
* Security enclave engineering.
Additional Skills & Qualifications

Non-Technical Skills
* Great communication skills both verbal and written.
Working Conditions

Working Conditions
* The work environment will be ‎95% indoor and ‎5% outdoor.
* The outdoor work environment may exceed temperatures 100º F.
* Candidate must be able to withstand extreme heat physically.
Strength Demands
* Medium - ‎50 lbs. Maximum lifting with frequent lift/carry up to ‎25 lbs.
Physical Requirements
* Stand or Sit
* Walk
* Repetitive Motion
* Use Hands / Fingers to Handle or Feel
* Stoop, Kneel, Crouch, or Crawl
* Talk or Hear
* See
* Push or Pull
* Climb (stairs, ladders) or Balance (ascend / descend, work atop, traverse)

COVID-‎19 Vaccinations Requirements
As a federal contractor, Agile Defense is subject to any federal vaccine
mandates or other customer/facility vaccination requirements. As such, to
protect the health and safety of its employees and to comply with customer
requirements, Agile Defense may require employees in certain positions to be
fully vaccinated against COVID-‎19. Vaccination requirements will depend on the
status of the federal contractor mandate and customer site requirements.

About Us!
Agile Defense is an Information Technology Solutions provider committed to
partnering with our customers to deliver the highest level of service to our
customers. We provided Information Technology (IT) services to the U.S.
Government, including several United States Civil agencies and various
branches within the U.S. Department of Defense.
Agile Defense has established a solid reputation of partnering with our
customers to deliver innovative IT solutions with our "Listen. Think.
Innovate." philosophy.
At Agile Defense, we know that our employees are our most important asset. We
believe in our responsibility to our fellow employees, customers, company, and
to our country. We promote teamwork, integrity, and creativity; we expect our
fellow employees to also live these values.
Agile Defense, Inc. does not discriminate in practices or employment
opportunities on the basis of an individual's race, color, national or ethnic
origin, religion, age, sex, gender, sexual orientation, marital status,
veteran status, disability, or any other proscribed category set forth in
federal or state regulations.