Cyber Incident Response Analyst at Quantum Research International Inc in Huntsville, Alabama

Job Description:

- Huntsville, AL, USA
- Full Time

Overview:

Quantum Research International, Inc. (Quantum) is a certified DoD Contractor providing services and products to US/Allied governments and industry in the following main areas: (1) Cyber Security/Intelligence Programs Support; (2) Command, Control, Communication, Computers, Intelligence, Surveillance, and Reconnaissance (C4ISR); (3) Space Operations and Control; (4); Warfighter Support and Logistics; (5) Weapon System Analysis; (6) Acquisition Support; (7); Test and Evaluation; and (8) Audio/Visual Technology Applications. Quantum's Corporate Office is located in Huntsville, AL, but Quantum actively hires for positions nationwide and internationally. We pride ourselves on providing high quality support to the U.S. Government and our Nation's Warfighters. In addition to our corporate office, we have physical locations in Arlington VA; Hampton Roads, VA; Bel Air MD; Colorado Springs, CO; and Shalimar, FL.

Mission:

Quantum is seeking highly qualified Incident Response Analyst to provide support to the National Cyber Security Operations Center's IR Team. In this role, you will conduct incident response through triage, data collection, analysis, containment and remediation. You will also conduct threat hunting activities to identify previously undetected compromises. Additionally, you will assist the customer prepare for cyber security incidents by developing playbooks and conducting tabletop exercises.

Responsibilities:

- Perform Tier 3 analysis in our Security Operations Center in order to identify incidents or events that require additional investigations.

- Conduct host forensics, network forensics, log analysis, and malware triage in support of incident response investigations and root cause analysis.

- Utilize new technology to conduct remote investigations and examine endpoint and network-based sources of evidence.

- Identify attacker tools, tactics, and procedures in Indicators of Compromise (IOCs) that can be applied to detection rules, threat hunting missions, as well as current and future investigations.

- Build scripts, tools, and methodologies to enhance our team's processes.

- Develop and present comprehensive and accurate reports, training, and presentations for both technical and executive audiences.

Requirements:

- Bachelor's Degree in a technical discipline desired, but years of experience and certifications may be accepted in lieu of Degree. Applicable Certifications include any of the following: CISSP, CISA, GCFA, GCFE, GNFA, CySA+, GCIA, GCIH, OSCP, Security+, or GSEC.

- Minimum of 2 years of experience in an Incident Response role conducting host forensics, memory analysis, network traffic analysis, and log analysis

- Experienced with EnCase, Magnet Axiom, FTK, SIFT, or other open-source forensic tools.

- Thorough understanding of enterprise security controls, incident response plans and tabletop exercises.

- Experience developing documentation and explaining technical details in a concise, understandable manner.

- Experience developing scripts and automating tasks to enhance investigations

- Ability to travel up to 10%

- Selected applicants will be subject to a government security clearance investigation and must meet eligibility requirements for access to classified information.

Equal Opportunity Employer/Affirmative Action Employer M/F/D/V :

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, age, disability, veteran status, genetic information, sexual orientation, gender identity, or any other characteristic protected by law. *Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Quantum Research International, Inc.
https://quantumintl.applicantpro.com
.