1+ months

Federal - Incident Forensics Specialist

Bethesda, MD 20814
Organization: Accenture Federal Services

Location: Germantown, MD


Accenture Federal Services, a wholly owned subsidiary of Accenture LLP, is a U.S. company with offices in Arlington, Virginia. Accenture's federal business has served every cabinet-level department and 30 of the largest federal organizations. Accenture Federal Services transforms bold ideas into breakthrough outcomes for clients at defense, intelligence, public safety, civilian and military health organizations.


We believe that great outcomes are everything. Its what drives us to turn bold ideas into breakthrough solutions. By combining digital technologies with what works across the worlds leading businesses, we use agile approaches to help clients solve their toughest problems fastthe first time. So, you can deliver what matters most.


Count on us to help you embrace new ways of working, building for change and put customers at the core. A wholly owned subsidiary of Accenture, we bring over 30 years of experience serving the federal government, including every cabinet-level department. Our 7,200 dedicated colleagues and change makers work with our clients at the heart of the nations priorities in defense, intel, public safety, health and civilian to help you make a difference for the people you employ, serve and protect.






As a member of the Incident Forensics Team perform the following tasks:

+ Perform incident response for cyber security incidents within the organization

+ Make preparations to effectively handle cyber incidents

+ Act as an escalation point to support security monitoring activities

+ Collect and analyze pertinent data to support security investigations

+ Work with System Owners and administrators to effectively contain cyber incidents, eradicate threats, and recover from cyber incidents

+ Coordinate and track ongoing remediation efforts with System Owners and labs/offices

+ Develop, update, communicate, and retain Standard Operating Procedures (SOPs)

+ Coordinate with administrators and technical staff to contain cyber incidents

+ Perform Digital Media Analysis

+ Perform Quality Assurance of incident response analysis and work products

+ Monitor the incident queue and work with responders to regularly update all active cases

+ Develop After Action Reports

+ Develop, capture, and deliver summary metrics of incident handling activities

+ Draft and deliver executive and technical briefings on cyber incident related topics




















Basic Skills & Qualifications:



+ 3+ years of related Cyber Security experience


+ 3+ years of experience performing network monitoring, incident response, malware analysis, and computer forensics


+ 1+ years experience performing PCAP analysis using Wireshark and other tools


+ 1+ years of experience with the following tools: Encase, Forensic Toolkit (FTK)



Preferred Skills & Qualifications:




+ Strong understanding of NIST SP 800-61 and other NIST Special Publications


+ Experience performing incident response


+ Experience performing security monitoring


+ Experience performing digital media analysis (DMA)


+ Experience configuring and operating industry standard Digital Media Analysis tools


+ Experience preserving Chain of Custody to support Law Enforcement in cyber investigations


+ Experience reviewing security events and log files in support of an investigation


+ Experience working with industry standard logging solutions


+ Experience working with industry standard Security Information & Event Management (SIEM) solutions


+ Experience analyzing PCAP


+ Strong understanding of the Cyber Kill Chain


+ Experience drafting analysis reports and briefings tailored appropriately for executive or technical audiences


+ Good oral and written communication skills


+ 3 years of related Cyber Security experience






An active security clearance or the ability to obtain one may be required for this role.



Candidates who are currently employed by a client of Accenture or an affiliated Accenture business may not be eligible for consideration.



Applicants for employment in the US must have work authorization that does not now or in the future require sponsorship of a visa for employment authorization in the United States and with Accenture (i.e., H1-B visa, F-1 visa (OPT), TN visa or any other non-immigrant status).



Accenture is a Federal Contractor and an EEO and Affirmative Action Employer of Females/Minorities/Veterans/Individuals with Disabilities.



Equal Employment Opportunity

All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law.



Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process.



Accenture is committed to providing veteran employment opportunities to our service men and women.








Categories

Posted: 2019-09-20 Expires: 2019-12-11

Before you go...

Our free job seeker tools include alerts for new jobs, saving your favorites, optimized job matching, and more! Just enter your email below.

Share this job:

Federal - Incident Forensics Specialist

Accenture
Bethesda, MD 20814

Join us to start saving your Favorite Jobs!

Sign In Create Account
Powered ByCareerCast