Log In
Sign Up
Software & Technology
Criterion Systems, Inc Hiring for Incident Response Analyst Job at Las Vegas, NV Full Time
br{display:none;}.css-58vpdc ul > li{margin-left:0;}.css-58vpdc li{padding:0;}]]>
Overview:
Criterion Systems, Inc. is committed to equal employment opportunity and non-discrimination at all levels of our organization. We believe in treating all applicants and employees fairly and make employment decisions without regard to any individual’s protected status: race, ethnicity, color, national origin, ancestry, religion, creed, sex/gender, gender identity/gender expression, sexual orientation, physical and mental disability, marital/parental status, pregnancy (including childbirth, lactation, and related medical conditions), age, genetic information (including characteristics and testing), military and veteran status, or any other characteristic protected by law. For our complete EEO/AA and Pay Transparency statement, please visit https://careers-criterion-sys.icims.com/.
At Criterion Systems, we developed a different kind of business—a company whose real value is a reputation for excellence built upon the collective skills, talents, perspectives, and backgrounds of its people. By accepting a position with Criterion Systems, you will join a group of professionals with a collaborative mindset where we share ideas and foster professional development to accomplish our goals. In addition to our great culture, we also offer competitive compensation and benefit packages, company-sponsored team building events, and advancement opportunities. To find out more about how Criterion can help you take your career to the next level please visit our website: www.criterion-sys.com
Responsibilities:
Our staff provides cyber security support to the Department of Energy National Nuclear Security Administration. Criterion Systems is seeking an Incident Response Analyst to support our DOE customer.
The candidate will be part of the Internal Security Operation Center (SOC) Incident Response team, working a day schedule in a 24×7 environment. The position requires interaction with security personnel, analysts, administrators and engineers at the local/internal deployment, which provides enterprise managed cybersecurity services to federal customer sites. Position can include up to 10% travel, local and nationwide. Applicant must be a positive, flexible, self-starter requiring minimal supervision, and able to excel in a fast-paced environment. Communication skills are critical with the ability to verbalize and provide documentation to both technical and non-technical audiences. Applicants must be detail-oriented and have the ability to multi-task effectively.
- Monitor, detect, identify, and investigate computer and network intrusions.
- Ability to research trends and countermeasures in computer/network including vulnerabilities, exploits, and malicious activity.
- Develop and maintain in-depth knowledge and hands-on experience with computer network security techniques and best practices.
- Must be able to identify suspicious and malicious activity in a heterogeneous network environment and respond appropriately.
- Research new and evolving threats and vulnerabilities with potential to impact the monitored environment.
- Referencing issued or discovered vulnerability and threat noticies, perform investigations and hunts on internal networks.
- Use of IARC asset management and software management systems for investigations.
- Investigate SIEM events and perform threat hunting specific to internal networks.
- Report site notices and status to the ISSM.
- Ensure SOC-Derived threat intel is applied to protect the internal/local networks.
- Perform local/internal SOC duties (vs Enterprise SOC duties).
- Act as SOC SME for the for local/internal networks.
- Read and understand network packet capture files.
- Monitoring and analysis of network and IDS information.
- Log collection, analysis, correlation, and alerting.
- Identification of suspicious/malicious activities.
- Identification and tracking of malicious code.
- Reporting malicious activity to client locations with recommendations for remediation.
- Review and management of incident resolutions.
- Travel up to 10% (not regularly scheduled, mostly just occasional trainings & meetings).
- Other duties as assigned.
Qualifications:
- Bachelor’s Degree in Computer Science, Information Systems, Information Security or related technical discipline OR 4 years professional IT experience may be used in lieu of degree.
- Five (5) years of cybersecurity work experience.
- Required: Ability to obtain a clearance US Citizenship (no dual citizens) OR Active Department of Energy (DOE) “Q” Clearance OR Top Secret Security Clearance OR Secret with an SSBI investigation
- Normal work schedule is weekdays/day shift.
- Must be available for periodic on-call, emergency and incident response work 24/7/365.
- Strong knowledge of networking.
- Strong knowledge of common network protocol behaviors.
- Strong knowledge of information security principles.
- Excellent verbal and written communications skills.
- Excellent customer service skills
- Experience as a network intrusion analyst.
- Experience with network and host-based IDS/IPS.
- Experience with SplunkES.
- Experience with CarbonBlack.
- US Citizenship (no dual citizenship)
- Information Security training is highly desired: SANS GSEC, SANS GCIA, SANS GCIH, CEH, OSCP.
- Certification in compliance with NIST NICE 800-181 Basic within 12 months, is required.
Criterion Systems, Inc. is committed to equal employment opportunity and non-discrimination at all levels of our organization. We believe in treating all applicants and employees fairly and make employment decisions without regard to any individual’s protected status: race, ethnicity, color, national origin, ancestry, religion, creed, sex/gender, gender identity/gender expression, sexual orientation, physical and mental disability, marital/parental status, pregnancy (including childbirth, lactation, and related medical conditions), age, genetic information (including characteristics and testing), military and veteran status, or any other characteristic protected by law. For our complete EEO/AA and Pay Transparency statement, please visit https://careers-criterion-sys.icims.com/.