Rapid Response CERT Incident Handler

Job Description:

Rapid Response CERT Incident Handler Summary:

Signature Consultants has an opportunity for a Rapid Response CERT Incident Handler in Washington DC. In this role, the candidate must be able to deploy nationally to respond to critical incidents within two hours of notification when on on-call status. The Incident Handler will safely acquire and preserve the integrity of data required for cyber incident analysis to help determine the technical/operational impact, root cause(s), scope, and nature of the cyber event or incident. He or she must provide an effective and comprehensive response that includes the recovery of any affected systems and the return to a fully functioning, secure, operational state for all services and systems. The shift for this position is  M-F (11:30 am-8:00 pm).

Responsibilities:

• Understand the Incident Response cycle and work processes
• Report, analyze, coordinate, and respond to any event or cyber incident for the purpose of mitigating any adverse operational or technical impact
• Extract meaningful info from technical reports and convert to documentation or summary reports that clearly conveys issues/status to leadership
• Coordinate the development and implementation of courses of action (COAs) that focus on containment, eradication, and recovery. Ensure the acquisition and preservation of data required for tactical analysis, strategic analysis, and/or LE investigations
• Ensure the timely response to cyber incidents through appropriate technical and operational channels in a way that promotes an accurate, meaningful, and comprehensive understanding of the cyber incident throughout its life cycle
• Effectively contain events and incidents and isolate systems to minimize any damage or impact to judicial information networks, systems, data, and services
• Ensure the effective coordination and communication of cyber incident information through appropriate channels and with appropriate stakeholders, other AO/DTS/ITSO organizations, and/or other government agencies
• Identify lessons learned to help improve infrastructure component protection strategies and cyber incident handling procedures to prevent a recurrence of the cyber event or incident
• Understand patterns of activity and trends to characterize the threat and direct protective and defensive strategies
• Sometimes intelligence and technical information may come from sources unique to the CND environment, including sources outside the AO. Consequently, extensive coordination can be required with the US-CERT, LE/CI organizations, the IC, industry partners, and critical infrastructure such as electric power supply system providers, telecommunications backbone providers, transportation management systems providers, etc.
• Document all findings and coordinating activities through the judicial ticket tracking system HEAT. Any response actions taken may also be part of this documentation including preliminary response actions, first responder actions, or actions taken to preserve and protect incident artifacts, evidence or chain of custody

About Signature Consultants, LLC

Headquartered in Fort Lauderdale, Florida, Signature Consultants was established in 1997 with a singular focus: to provide clients and consultants with superior staffing solutions. For the seventh consecutive year, Signature was voted as one of the “Best Staffing Firms to Work For” and is now the 14th largest IT staffing firm in the United States (source: Staffing Industry Analysts). With 26 locations throughout North America, Signature annually deploys thousands of consultants to support, run, and manage their clients’ technology needs. Signature offers IT staffing, consulting, managed solutions, and direct placement services. For more information on the company, please visit www.sigconsult.com.