Incident Handler

Clearance Level
Secret
Category
Cyber Security
Location
Leesburg, Virginia

REQ#: RQ59905

Travel Required: Less than 10%
Requisition Type: Regular

General Dynamics Information Technology premier provider of high-tech IT solutions to the government IT market. delivers cost-effective, next-generation IT solutions and services to the Department of Defense, the intelligence community and federal civilian agencies as they modernize their information systems.

We are currently seeking an Incident Handler in Leesburg, VA to join our brilliant team. The Incident Handler supports a Civilian Agency Cyber Security Operations Center (SOC) organization protecting the network security of tens of thousands of users. 
The Information Systems Security Analyst Associate responsibilities include: 
•    Receive, document, and report cyber security events. 
•    Categorize incidents and implement corresponding escalation procedures. 
•    Communicate and coordinate incident response efforts. 
•    Conduct daily operational update meetings for SOC staff and unscheduled situational update briefings for FAA leaders. 
•    Analyze reports to understand threat campaign(s) techniques, lateral movements and extract indicators of compromise (IOCs). 
•    Provide telephone, e-mail and ticket service to customers. 
•    Reference applicable departmental and operating administration policies in work products 
•    Access, secure and inspect local classified information processing areas. 

Qualities/Additional info: Incident Handler will maintain twenty four (24) hours a day, seven (7) days a week, three hundred sixty five (365) days per year, incident handling capability. Incident Handler must be a proven team player with excellent oral and written communications skills. Incident Handler must be capable of working on projects independently. Frequent interaction with government client is required. Candidate must have previous experience working in a network security incident response team, such as a Security Operations Center (SOC), Computer Emergency Response Team (CERT), Computer Incident Response Team (CIRT), Computer Incident Response Center (CIRC) or Cyber Security Incident Response Center (CSIRC). Infrequent (


Job Qualifications:
Required Education and Experience: 
Education:
- Bachelor's degree in Computer Science or Information systems.
OR
- Minimum six (6) years of relevant professional experience.
Experience: 
In addition to required education or equivalent experience;
- Minimum four (4) years IT experience, with at least one of those years related to network security

Secret clearance required

Preferred Experience:
•    Experience with intrusion detection systems and threat techniques. (Lateral Movement, Rootkits & Toolkits.
•    Experience working in a network security environment, such as a Security Operations Center (SOC), Computer Emergency Response Team (CERT), Computer Incident Response Team (CIRT), Computer Incident Response Center (CIRC) or Cyber Security Incident Response Center (CSIRC).
•    Experience with business process reengineering, capability maturity model, change management, or process improvement.
•    Exceptional writing and documentation skills.

We are GDIT. The people supporting some of the most complex government, defense, and intelligence projects across the country. We deliver. Bringing the expertise needed to understand and advance critical missions. We transform. Shifting the ways clients invest in, integrate, and innovate technology solutions. We ensure today is safe and tomorrow is smarter. We are there. On the ground, beside our clients, in the lab, and everywhere in between. Offering the technology transformations, strategy, and mission services needed to get the job done.

GDIT is an Equal Opportunity/Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or veteran status, or any other protected class.