Do you want to grow your career and be part of a team solving critical challenges that affect the world? Then Leidos is the place for you!
Department of Homeland Security (DHS), Customs and Border Protection (CBP) Security Operations Center (SOC) is a US Government program responsible to prevent, identify, contain and eradicate cyber threats to CBP networks through monitoring, intrusion detection and protective security services to CBP information systems including local area networks/wide area networks (LAN/WAN), commercial Internet connection, public facing websites, wireless, mobile/cellular, cloud, security devices, servers and workstations. The CBP SOC is responsible for the overall security of CBP Enterprise-wide information systems, and collects, investigates and reports any suspected and confirmed security violations.
The DHS CBP SOC Program has a critical need for a Tier 1 Incident Response Analyst. This is a full time funded position based in Alexandria, VA. This position does not have Telecommuting Options.
The ideal candidate will have a basic understanding of incident response, cyber threats, information security, and monitoring and detection. The candidate must be familiar with TCP/IP ports and protocols, intrusion detection systems, and netflow analysis.
Duties and Responsibilities:
- Penetration Testing and vulnerability assessments.
- Use a variety of Cyber Tools to monitor system and application logs, intrusion detection alerts for indication of unauthorized activity and perform analysis on infected systems.
- Monitor for fraud waste and abuse including content inappropriate to the workplace
- Review security incident response policies and identify the need for changes based on new security technologies or threats.
EDUCATION & EXPERIENCE:
Requires BS degree and 2 to 4 years of relevant experience or Masters Degree with less than 2 years of relevant experience. Four years of related experience may be considered in lieu of a BS degree, with strong preference toward recent applicable cyber experience and/or certifications
Minimum of a current Secret Clearance. In addition to specific clearance requirements all Department of Homeland Security CBP SOC employees are required to have or be able to favorably pass a 5 year (BI) Background Investigation.
Experience in Incident Response. Between 1-2 years of experience in one or more of these specialized areas:
- Email security
- Digital media forensic
- Monitoring and detection
- Vulnerability assessment and pen test
- Cyber intelligence analysis
Security+ Certification or equivalent in industry certification, background and knowledge.
Experience analyzing and synthesizing information with other relevant data sources, evaluating, interpreting, and integrating all sources of information, and fusing computer network attack analyses with counterintelligence and law enforcement investigations.