Cyber Security Incident Response Engineer
- Full-time
TechnoGen, Inc. (formerly known as SYSCOM Technologies) is a Proven Leader in providing full IT Services, Software Development and Solutions for 12+ years. TechnoGen is a Small & Woman Owned Minority Business with GSA Advantage Certification. We have offices in VA, MD & Offshore development centers in India. We have successfully executed 100+ projects for clients ranging from small business and non-profits to Fortune 50 companies and federal, state and local agencies.
TechnoGen leadership has experience guiding highly skilled and certified professionals delivering end to end IT and Business consulting services projects in public and commercial sectors across the globe.
Job Title: Cyber Security Incident Response Engineer
Location: Washington, DC
Duration: FULL TIME
Requirements:
- 5+ years of experience in Cybersecurity incident handling and experience in Security Operation Center in Federal government environments
- Familiarity with OMB and FISMA mandates surrounding Information Security
- Deep understanding of NIST Special Publications, specifically 800-61, 800-37, 800-53 and 800-137
- Knowledge of security policy and technical standard development, secure infrastructure design reviews, multi-tiered trust zone structures, and complex networking through multiple level network security structures
- Familiarity with common SOC tools - SIEM, Tenable, ForeScout, App Detective, DB Protect, Fortify, Hailstorm, Cisco Ironport, etc.
- Excellent oral and written communication skills
- Familiarity with hardening techniques for a wide range of Microsoft operating systems, databases, and software suites, including: Windows Server 2008, 2012, Windows Desktop 7, 8, Microsoft SQL Server 2008, 2012, 2014, Microsoft SharePoint 2010, 2013
- Candidates must be able to work on-site at a Federal Agency located in Washington, DC and must be able to pass a U.S Federal government background check
- Bachelor's degree in Information Systems, related discipline or equivalent experience
- CISM, CISSP-ISSMP, GCIH or similar industry certification preferred
Responsibilities:
- Triage incident handling support for incident detection, analysis, coordination, and response
- This team member will work with firewalls, intrusion protection, web proxy, antivirus, SIEM, vulnerability scanning and other key threat countermeasures.
- Research and analyze data sources to provide insight into new trends to customer environment collaborating with other members of the SOC
- Troubleshoot problems with customer policies and controls
- Performing on-demand vulnerability scanning and compliance monitoring to ensure agency security standards are met
- Identification of network and operating systems vulnerabilities and recommending countermeasures
- Supports the deployment and integration of security tools
- Analyze and recommend solutions to information security problems based on knowledge of the major information security products and services
- Strong interpersonal and communication skills with the ability to lead and work as part of a team
All your information will be kept confidential according to EEO guidelines.
#J-18808-Ljbffr