Cyber Defense Shift Lead

Cyber Defense Shift Lead

Maximus TCS (Technology and Consulting Services) Internal Job Profile Code: TCS058, T4, Band 7

Job-Specific Essential Duties and Responsibilities:

- Work with intrusion analysts to identify, report, and coordinate the remediation of cyber threats for the client.

- Deliver timely and actionable sanitized intelligence to cyber incident response teams.

- Apply technical knowledge of computer systems, networks, and cyber threat information to evaluate the client's security posture.

- Perform intelligence analysis to assess intrusion signatures, tactics, techniques, and procedures associated with cyber attacks.

- Investigate hackers, their methods, vulnerabilities, and exploits, and provide detailed briefings and intelligence reports to leadership.

Job-Specific Minimum Requirements:

- Bachelor's degree and a minimum of 8 years of total experience in cybersecurity. Additional professional experience may be considered in lieu of a degree.

- Of those 8 years, at least 7 years must include hands-on experience in security intrusion detection and analysis using technologies such as WANs, IDS/IPS/HIPS systems, server/web log analysis, and raw data log review.

- At least 5 of the 8 years must be at a senior level (including mentoring/guiding/reviewing junior staff in investigations and analysis).

- Deep knowledge of incident triage and root cause analysis. Led investigations of cyber alerts and incidents. Determination of attack vector.

- Determination of action to be taken based on event/incident. Risk analysis.

- Expertise involving log and console event analysis, including use of Splunk as SIEM. Sysmon log analysis. Use of Grep preferred.

- Wireshark network analysis including protocol triage.

- Experience with firewall ACLs, Snort-based IDS events, PCAPs, and web server logs analysis.

Additional Job-Specific Minimum Requirements:

- Must have hands-on Splunk SIEM experience, including a minimum of 2 years leading a cybersecurity or security operations shift team.

- Advanced certification strongly preferred (examples: CISM, CISSP, GCIH, GCIA, CEH, SecurityX/CASP).

Must be able to obtain and maintain a Public Trust clearance.

#C0reJobs #clearance #VeteransPage

EEO Statement: Maximus is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information and other legally protected characteristics.

Pay Transparency: Maximus compensation is based on various factors including but not limited to job location, a candidate's education, training, experience, expected quality and quantity of work, required travel (if any), external market and internal value analysis including seniority and merit systems, as well as internal pay alignment. Annual salary is just one component of Maximus's total compensation package. Other rewards may include short- and long-term incentives as well as program-specific awards. Additionally, Maximus provides a variety of benefits to employees, including health insurance coverage, life and disability insurance, a retirement savings plan, paid holidays and paid time off. Compensation ranges may differ based on contract value but will be commensurate with job duties and relevant work experience. An applicant's salary history will not be used in determining compensation. Maximus will comply with regulatory minimum wage rates and exempt salary thresholds in all instances.

Minimum Salary: $95,000.00

Maximum Salary: $115,000.00