Cardinal Technology Systems Corp. is a government IT solutions provider servicing commercial and government initiative in various parts of the United States. We are currently seeking a Cyber Incident Response Expert to work for our company.

• Must have an active TS/SCI clearance.
• Serves as hunt and incident response subject matter expert (SME), applying in-depth knowledge on threat actor (TA) tools, techniques, and procedures (TTPs).
• Serves as an incident response expert in support of a technology insertion team.
• Distills analytic findings into executive summaries and in-depth technical reports.
• Provide expert support, analysis, and research with only broad direction into exceptionally complex problems and processes relating to the subject matter as it relates to hunt and incident response activities.
• Serves as technical expert on high-level incident response teams providing technical direction, interpretation, and alternatives.
• Exercises considerable latitude in determining technical objectives of an assignment or task at hand.
• Independently develops technical solutions to complex problems that require the regular use of ingenuity and creativity.
• Analyzes incident data and victim environments to recommend targeted mitigations.
• Advise technical personnel on countermeasure implementation and customization.
• Supports internal stakeholders on containment and eradication missions.
• Documents analysis in a standardized knowledgebase for sharing and publication.
• Assists in maintaining branch process and procedure documentation.
• Guides the completion of hunt and incident response activities.
• Please note that this is a pipeline position, meaning we are proactively identifying qualified candidates for anticipated future opportunities, and there may not be an immediate opening at the time of application.

• Must have an active TS/SCI clearance.
• U.S. Citizenship
• Required Education: BS Computer Science, Cyber Security, Computer Engineering, or related degree; or HS Diploma & 7+ years of technical experience in the area of expertise.
• Must have an active TS/SCI clearance.
• Must be able to obtain DHS Suitability.
• 7+ years of directly relevant experience in the area of expertise.
• 3+ years of experience related to the evaluation and implementation of new cyber response capabilities.
• Must be able to travel domestically on short notice.
• Strong understanding of network architecture/security.
• Experience performing cyber incident response.
• Ability to think independently.
• Demonstrates superior written and oral communication skills.
• Must be able to work collaboratively across physical locations.
• Skilled in identifying different classes of attacks and attack stages.
• Understanding of system and application security threats and vulnerabilities.
• Understanding of proactive analysis of systems and networks, to include creating trust levels of critical resources.
• Proficiency with common operating systems (e,g, Linux/Unix, Windows).

• Desired Certifications: One or more: DoD 8140.01 IAT Level II, IASAE II, CSSP Analyst, DoD 8140.01 GCIA, GCIH, CSSP Analyst/CSSP Incident Responder, DoD 8140.01 CEH, CSSP Analyst, SANS GIAC GNFA preferred, SANS GRID, GICSP, or GCIP a plus.
• Experience leading and mentoring technical teams.
• Knowledge of Computer Network Defense policies, procedures and regulations.
• Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored].
• Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return- oriented attacks, and malicious code).
• Network and System administration experience.
• Strong understanding of adversarial tactics/techniques/procedures (TTPs).
• Experience with Identity and Access Management (IAM) tools.
• Ability to review and analyze Enterprise Architecture (EA) from a security perspective.
• Understanding of cyber defense-in-depth principles.
• Hands-on skill in host/network intrusion detection.
• Ability to perform event correlation.
• Experience with malicious activity analysis.
• Ability to collaborate with stakeholders at multiple levels within an organization.

• Medical, Dental, Vision Benefits
• Paid Life
• Paid Vacation, Holidays, Sick Leave, Floating Holidays, Bereavement Leave
• Semi-monthly pay cycle

Cardinal Technology Systems, Corp (“CTech-Sys”), www.ctech-sys.com, is an SBA Certified 8(a) and HUBZone company located in the National Capital Region (NCR) and serves both government and commercial clients such clients as US CBP, US CIS, DLA, DFuse Technologies, and American Environmental Engineering Consultants.

Cardinal Technology Systems, Corp is an Equal Employment Opportunity employer and it’s our policy to consider applicants for employment without regard to sex, race, color, creed, religion, national origin, sexual orientation, marital status, age, disability, veteran status, alienage, ancestry, or any other factors prohibited by law. Employment selections are based on company and client requirements and the qualifications and skills of the candidate. CTech-Sys is committed to actively capitalizing on the diversity of skills, talents and perspectives of our employees.