Incident Response Lead/Advisor

Job description

**Be Challenged and Make a Difference** In a world of technology, people make the difference. We believe if we invest in great people, then great things will happen. At AnaVation, we provide unmatched value to our customers and employees through innovative solutions and an engaging culture. **Description of Task to be Performed:** AnaVation is seeking an experienced cyber professional to join our team and support our mission critical customer in Reston, VA. As the Incident Response Lead/Advisor, you will advise/mentor/coach a team of cyber security professionals on best practices regarding incident responses on a variety of networks, platforms, and tools. Your previous experience working collaboratively across cross-functional teams/staff, at multiple levels, to deliver short-term, medium-term, and long-term response efforts would drive customer and program success. ### Required Qualifications: - **Clearance:** U.S. Citizen, TS/SCI w/CI Poly - **Education:** Bachelor's degree in a relevant field - **Certification:** DoD 8570 IAT Level II (CySA+) within 30 days of contract start - **Location:** Full time, on-site position in Reston, VA. - **Experience:** - 8 years of experience (or 6 years of experience with a relevant Master’s Degree) with identifying, analyzing, and responding to security incidents such as cyberattacks, data breaches, and system vulnerabilities. - Monitoring and analyzing **security logs and network traffic** to detect anomalies - Executing **IR playbooks** and conducting **digital forensics** - Collaborating with IT and security teams to **mitigate threats** and prevent recurrence - Advising on **security policies, risk management, and compliance** These roles often require **rotational shifts** to ensure 24x7 coverage, especially in large enterprises and financial institutions - Knowledge of cyber adversary tactics, techniques, and procedures, along with analysis of advanced intrusions across a complex global network and basic cyber-security forensics procedures. - Understanding of how to read and interpret malware analysis reports. - Strong oral and written communications skills and ability to interact effectively with technical and non-technical audiences. - Excellent technical editing of formal report production and related skills. ### Preferred Qualifications: - **CEH** (Certified Ethical Hacker) - **GCIH** (GIAC Certified Incident Handler) - **GCIA** (GIAC Certified Intrusion Analyst) - Cyber Mission Force analyst or operator experience - Management experience - Experience with DoD cybersecurity operations - Experience with classified system information assurance