Senior Cyber Response Analyst

vor 2 Stunden

Wiesbaden, Deutschland SOSi Vollzeit

Job DescriptionOverview**This position is contingent upon contract award**SOSi is seeking a Senior Cyber Response Analyst in Wiesbaden, Germany. The ideal candidate will possess senior-level expertise in identifying, triaging, and neutralizing sophisticated cyber threats. This role involves performing deep-dive forensic analysis, malware investigation, and coordinating enterprise-wide responses to security incidents to ensure the resilience of critical mission networks in support of theater-level mission requirements.Essential Job DutiesMonitor and analyze Intrusion Detection Systems (IDS) and Security Information and Event Management (SIEM) platforms to detect malicious or anomalous activity across the enterprise.Lead the evaluation of security events to determine the scope and severity of incidents, performing rapid triage to mitigate immediate risks.Perform advanced technical forensics on various media, including hard disk drives (HDD) and solid-state drives (SSD), and conduct malware analysis to understand threat vectors.Analyze complex data sets, including packet captures (PCAP) and network logs, to draw definitive conclusions regarding past, present, and potential future security breaches.Coordinate response efforts between technical engineering teams and non-technical stakeholders to ensure a unified defense posture.Maintain expert-level knowledge of hacker Tactics, Techniques and Procedures (TTPs) and the current global threat landscape to proactively harden theater defenses.Articulate detailed investigative findings and after-action reports to both technical audiences and executive leadership.QualificationsMinimum RequirementsActive in scope TS/SCI clearance.BA/BS degree (Engineering, Computer Science, Science, Business Administration, or Mathematics) plus five (5) years of specialized experience OR Associate’s degree plus seven (7) years of specialized experience OR a major professional certification plus seven (7) years of specialized experience OR eleven (11) years of specialized experience.Possession of at least one of the following: Cisco Certified: CyberOps Professional or GIAC: GCIA or GCIH or GCFE or GNFA or GREM or Blue Team Level 2 (BLT2) or Microsoft Certified: Cybersecurity Architect Expert or Offensive Security Defense Analyst (OSDA).Demonstrated experience in monitoring intrusion detection and security information management systems.Experience in performing technical malware or forensic analysis on hard disk drives, SSDs, media, PCAP, and network logs.Proven ability to analyze data from various sources and draw conclusions regarding security incidents.Experience coordinating incident response with both technical and non-technical parties.Preferred QualificationsExperience with EnCase, FTK, or open-source forensic suites (SANS SIFT).Familiarity with the MITRE ATT&CK framework for identifying adversary behavior.Proficiency in scripting (Python/PowerShell) to automate log parsing and triage tasks.Prior experience working within a Cybersecurity Service Provider (CSSP) or Tier 3 Security Operations Center (SOC).Additional InformationWork EnvironmentNormal office conditions with potential to perform duties in deployed locations.May be requested to work evenings and weekends to meet program and contract needs.Working at SOSiAll interested individuals will receive consideration and will not be discriminated against for any reason.

  • Senior Cyber Incident Handling Analyst

    vor 3 Stunden

    Wiesbaden, Deutschland SOSi Vollzeit

    Job DescriptionOverview***This position is contingent upon contract award.***SOSi is seeking a Senior Cyber Incident Handling Analyst in Wiesbaden, Germany. The ideal candidate will possess senior-level expertise in managing the full lifecycle of cyber security incidents. This role involves monitoring for malicious activity, triaging events, and leading the...

  • Senior Cyber Incident Handling W/top Secret Clearance

    Vor 5 Tagen

    Wiesbaden, Deutschland TekSynap Vollzeit

    Responsibilities & Qualifications: **REQUIRED QUALIFICATIONS** **Clearance** Current U.S.TS/SCI clearance required (T5 Investigation). (Elevated/Privileged Access). **Education** Bachelor of Science/Arts Degree in Engineering or Computer Science **OR** Associate’s degree plus seven (7) years of specialized experience **Experience** Experience in...

  • Security Operations Center

    vor 2 Stunden

    Wiesbaden, Deutschland SVA Vollzeit

    Ihre AufgabenKontinuierliche Überwachung von Netzwerken und Systemen auf Sicherheitsvorfälle und Anomalien Identifikation und Untersuchung von potenziellen Sicherheitsvorfällen Incident Handling: schnelle Reaktion auf Sicherheitsvorfälle zur Schadensminimierung; enge Zusammenarbeit mit unserem Incident-Response-Team Analyse von Bedrohungsdaten und...

  • Information Technology Specialist

    vor 1 Woche

    Wiesbaden, Deutschland U.S. Army Cyber Command Vollzeit

    **Duties**: - Incumbent serves as a Collaboration Support Specialist in the Network Management Branch, Regional Cyber Center - Europe. - Selectee proactively coordinates and carries out the activities and processes required to implement, operate, and maintain premier collaboration services as a Network Operations Specialist. - Builds, tests, and delivers...

  • Information System Security Officer

    Vor 5 Tagen

    Wiesbaden, Deutschland General Dynamics Information Technology Vollzeit

    **Type of Requisition**: Regular **Clearance Level Must Currently Possess**: Top Secret/SCI **Clearance Level Must Be Able to Obtain**: Top Secret/SCI **Suitability**: **Public Trust/Other Required**: None **Job Family**: Information Security **Job Qualifications**: **Skills**: Information Security, Information System Security, Security...

  • Information System Security Officer

    vor 2 Wochen

    Wiesbaden, Deutschland General Dynamics Information Technology Vollzeit

    Type of Requisition: Regular Clearance Level Must Currently Possess: Top Secret/SCI Clearance Level Must Be Able to Obtain: Top Secret/SCI Suitability: Public Trust/Other Required: Job Family: Information Security Job Qualifications: **Skills**:Information Security, Information System Security, Security System Certifications: CompTIA Network + -...

  • Interdisciplinary

    Vor 5 Tagen

    Wiesbaden, Deutschland U.S. Army Cyber Command Vollzeit

    **Duties**: - Serves as a Network Engineer/Architect, senior technical expert/advisor, and key staff Network Engineer/IT Specialist. - Responsible for planning, directing, conducting, coordinating, and advising on projects and programs of broad scope and unusual complexity. - Performs critical analysis concerning engineering and implementation of novel and...

  • Signal Operations Chief

    vor 2 Wochen

    Wiesbaden, Deutschland U.S. Army Cyber Command Vollzeit

    **Duties**: - Directs the effective provision of a wide variety of general administrative and operational services and actions supporting the day-to-day operation of the Brigade. - Translates relevant technical and programmatic information received from the Network, Enterprise, Technology Command or higher authority into guidance and actions. - Keeps...

  • Surety Program Officer

    vor 1 Woche

    Wiesbaden, Deutschland U.S. Army Cyber Command Vollzeit

    **Duties**: - Serves as 2nd Theater Signal Brigade's Program Manager and primary point of contact for the Nuclear Surety, Nuclear Command, Control, Communications and Organization Inspection Programs. - Provides leadership, planning and direction to ensure an active and dynamic inspection program of the Brigade's Nuclear Surety, NC3 and Organization...

  • Information Technology Specialist

    vor 1 Woche

    Wiesbaden, Deutschland U.S. Army Cyber Command Vollzeit

    **Duties**: - Serve as Information System Security Officer (ISSO) Specialist in the Cyber Security Division (CSD) of the 102d Signal Battalion (SB) under the 2nd Signal Brigade (BDE). - Provide advice and assistance to the Signal Battalion Commander on cybersecurity matters within the 102d SB Area of Responsibility (AOR). - Conduct periodic announced and...