Responsibilities:

·Assists the Government lead in coordinating teams in preliminary incident response investigations

·Assists the Government lead with interfacing with the customer while on site

·Determines appropriate courses of actions in response to identified and analyses anomalous network activity

·Assesses network topology and device configurations identifying critical security concerns and providing security best practice recommendations

·Collects network intrusion artifacts (e.g., PCAP, domains, URI’s, certificates, etc.) and uses discovered data to enable mitigation of potential Computer Network Defense incidents

·Analyzes identified malicious network activity to determine weaknesses exploited, exploitation methods, effects on system and information

·Collects network device integrity data and analyze for signs of tampering or compromise

·Assists with real-time CND incident handling (i.e., forens...