Cyber Defense Incident Responder

Key Role:

Process and analyze cyber threat intelligence data and compile standard and ad-hoc reports as needed. Leverage expertise of cyber data and information, analyze and identify data requirements, use specialized tools and services, and develop intelligence products. Apply advanced consulting skills or extensive technical expertise, including full industry knowledge. Develop innovative solutions to complex problems. Work without considerable direction, and mentor and supervise team members.

Basic Qualifications:

• 2+ years of experience performing cybersecurity for federal government agencies
• Ability to investigate, analyze, and respond to cyber incidents within the network environment or enclave to coordinate and provide senior-level technical support to enterprise-wide cyber defense analysts to resolve cyber defense incidents and determine the scope, urgency, and impact of cyber defense incidents
• Ability to coordinate incident response functions and recommend incident remediation strategies
• Ability to correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation
• Ability to perform analysis of log files from a variety of sources, including individual host logs, network traffic logs, firewall logs, and intrusion detection system (IDS) logs, to identify possible threats to network security
• Ability to perform cyber defense incident triage, including identifying the specific vulnerability and making recommendations that enable expeditious remediation
• Ability to perform real-time cyber defense incident handling tasks, including forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation, to support deployable Incident Response Teams (IRTs)
• Ability to receive and analyze network alerts from various sources within the enterprise and determine possible causes of such alerts
• Top Secret clearance
• Bachelor's degree in an Information Systems or Cybersecurity field

Clearance:

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance is required.

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Identity Statement

As part of the application process, you are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Work Model
Our people-first culture prioritizes the benefits of flexibility and collaboration, whether that happens in person or remotely.

• If this position is listed as remote or hybrid, you'll periodically work from a Booz Allen or client site facility.
• If this position is listed as onsite, you'll work with colleagues and clients in person, as needed for the specific role.

EEO Commitment

We're an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change - no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law.