Incident Manager I
Core
On-site incident response for civilian Government agencies and critical asset owners experiencing cyberattacks, providing immediate investigation and resolution.
Role type
Incident Manager I (Cybersecurity Operations)
Builds
Incident response capabilities for government clients
Domain
Cybersecurity / Government Contracting
Deliverable
client delivery
Required skills
incident triage, Computer Network Defense (CND) incident handling, log data analysis, threat monitoring, vulnerability categorization, attack stage recognition, NIST 800-62 compliance, FISMA reporting, NCCIC scoring system, system hardening techniques
Preferred skills
GCIH, GCFA, GISP, GCED, CCFP, CISSP certifications
Technologies
NIST 800-62, FISMA, NCCIC
Responsibilities
Correlating incident data to identify trends, recommending defense in depth principles, performing incident triage to determine scope and urgency, researching resolution steps, applying cybersecurity concepts to intrusion detection, monitoring external threat data sources, identifying incident causes and infection vectors, analyzing network alerts, tracking and documenting incidents from detection to resolution, providing shift support
Seniority
Entry-level (1+ years experience)
