Adapt Forward

CND Incident Response Analyst - Hawaii

Honolulu, HI - Full Time

Job Description:

The CND-Incident Response Analyst will identify, isolate, investigate, inform, and implement measures to detect and protect data across a wide spectrum of source types and locations. The CND-Incident Response Analyst is required to validate suspicious events or reports and determine if the event constitutes an incident. The CND-Incident Response Analyst will ensure incidents are properly entered into the appropriate automated reporting system and determine the severity of the incident. Reporting and response measures will be taken immediately in order to meet the Chairman of the Joint Chiefs of Staff Manual (CJCSM) 6510.01 reporting requirements. The CND-Incident Response Analyst must have in depth technical expertise with packet analysis and system log analysis. 

Responsibilities:

  • Ensure associated documentation and capabilities remain compliant with CJCSM 6510.01A and other applicable policy directives.
  • Provide network intrusion detection and monitoring, correlation analysis, incident response and support for the Network Security Operations Center (NSOC) and its subscriber sites.
  • Validate suspicious events or reports, determine if the event constitutes an incident, and properly enter associated data into the appropriate automated reporting systems.
  • Provide coordination of significant incidents with CYBERCOM and supported entities to ensure proper analysis is performed and timely and accurate reporting of the incident is affected.
  • Provide, develop, and maintain a forensic capability to enhance response to, support of, and investigation into significant network incidents in order to provide a clearer view of the exploits, vulnerabilities, and TTPs used to cause the incident.
  • Provide support for the NSOC’s Incident Response 24x7 support capability during non-core business hours consistent with CNDSP requirements as needed.
  • Participate in program reviews, product evaluations, and onsite certification evaluations.

Requirements:

  • Active Secret Upgradable to Top Secret/SCI Clearance Required
  • 8570.01-M CND Incident Responder Category IAT I, II or III Certification Required
  • Excellent oral and written communications skills.
  • Familiarity with CJCSM 6510.01.
  • Experience with Splunk, Flow Analysis Tools, IDS/IPS, etc.
  • In-depth technical expertise with packet analysis, SNORT / Suricata / BRO development and implementation
  • Technical experience in reviewing and understand systems logs to include Sysmon logs.
  • The ability to ingest adversarial tactics, techniques, and procedures in order to remain flexible and functional.

**Additional Information: Due to the nature of the work required, operations are conducted 24/7/365 with three primary shifts. Choice of shifts will be made available with the understanding that placement is at the discretion of the CND Services Director and/or assigned manager.

 

Adapt Forward is an equal opportunity employer and does not discriminate or allow discrimination on the basis of race, color, religion, gender, age, national origin, citizenship, disability, veteran status or any other classification protected by federal, state, or local law. Adapt Forward promotes affirmative action for minorities, women, disabled persons, and veterans.

Apply: CND Incident Response Analyst - Hawaii
* Required fields
First name*
Last name*
Email address*
Phone number*
Resume*

Attach resume as .pdf, .doc, .docx, .odt, .txt, or .rtf (limit 5MB) or paste resume

Paste your resume here or attach resume file

Do you have an active clearance?*
The following questions are entirely optional.
To comply with government Equal Employment Opportunity / Affirmative Action reporting regulations, we are requesting (but NOT requiring) that you enter this personal data. This information will not be used in connection with any employment decisions, and will be used solely as permitted by state and federal law. Your voluntary cooperation would be appreciated. Learn more.
Gender
Race/Ethnicity

Invitation for Job Applicants to Self-Identify as a U.S. Veteran
  • A “disabled veteran” is one of the following:
    • a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or
    • a person who was discharged or released from active duty because of a service-connected disability.
  • A “recently separated veteran” means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.
  • An “active duty wartime or campaign badge veteran” means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.
  • An “Armed forces service medal veteran” means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.
Veteran status
I IDENTIFY AS ONE OR MORE OF THE CLASSIFICATIONS OF PROTECTED VETERAN LISTED ABOVE
I AM NOT A PROTECTED VETERAN
I DON’T WISH TO ANSWER

Voluntary Self-Identification of Disability
Voluntary Self-Identification of Disability Form CC-305
OMB Control Number 1250-0005
Expires 1/31/2020
Why are you being asked to complete this form?

Because we do business with the government, we must reach out to, hire, and provide equal opportunity to qualified people with disabilities.i To help us measure how well we are doing, we are asking you to tell us if you have a disability or if you ever had a disability. Completing this form is voluntary, but we hope that you will choose to fill it out. If you are applying for a job, any answer you give will be kept private and will not be used against you in any way.

If you already work for us, your answer will not be used against you in any way. Because a person may become disabled at any time, we are required to ask all of our employees to update their information every five years. You may voluntarily self-identify as having a disability on this form without fear of any punishment because you did not identify as having a disability earlier.

How do I know if I have a disability?

You are considered to have a disability if you have a physical or mental impairment or medical condition that substantially limits a major life activity, or if you have a history or record of such an impairment or medical condition.

Disabilities include, but are not limited to:

  • Blindness
  • Deafness
  • Cancer
  • Diabetes
  • Epilepsy
  • Autism
  • Cerebral palsy
  • HIV/AIDS
  • Schizophrenia
  • Muscular dystrophy
  • Bipolar disorder
  • Major depression
  • Multiple sclerosis (MS)
  • Missing limbs or partially missing limbs
  • Post-traumatic stress disorder (PTSD)
  • Obsessive compulsive disorder
  • Impairments requiring the use of a wheelchair
  • Intellectual disability (previously called mental retardation)
Please check one of the boxes below:

YES, I HAVE A DISABILITY (or previously had a disability)
NO, I DON’T HAVE A DISABILITY
I DON’T WISH TO ANSWER

Your Name Today's Date
Reasonable Accommodation Notice

Federal law requires employers to provide reasonable accommodation to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job or to perform your job. Examples of reasonable accommodation include making a change to the application process or work procedures, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment.


iSection 503 of the Rehabilitation Act of 1973, as amended. For more information about this form or the equal employment obligations of Federal contractors, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp.


PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Human Check*