Position:

Incident Response Specialist, TS/SCI Clearance Required

Posted:

06/20/2023

GRIMM Cyber, a market leader in offensive and defensive tailored cyber security solutions for commercial and government applications, is hiring Incident Response Specialists to help defend NASA enterprise networks against global cyber threats. Since 2013, GRIMM has delivered cybersecurity testing and research to harden avionics and satellite platforms, commercial products and applications, and Federal IT networks to improve cyber resilience. We are looking to grow our team of cyber security professionals committed to client excellence, career development, and growing technical knowledge for real-world applications.

Incident Response (IR) Specialists will provide full-spectrum support to all aspects of NASA’s Security Operations Center’s (SOC) IR mission including activities such as incident identification, containment, recovery, eradication, investigation, analysis, reporting, and follow-up on all cybersecurity incidents, privacy or CUI breaches that affect the agency. Team members will provide services to protect, detect and respond to unauthorized activities affecting NASA information, information systems, and networks.

Once selected, team members will:

- Implement system security measures in accordance with established procedures to ensure confidentiality, integrity, availability, authentication, and non-repudiation

- Assist the Government in coordinating NASA’s response to agency-wide and/or significant cyber incidents and providing oversight for this service

- Ensure cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level

- Review cyber intelligence threats reports, including but not limited to, SOC MARs, SOC SARs, and DHS/CISA Emergency Directives and take appropriate actions

- Provide analysis reports to potentially affected organizations in accordance with NASA’s guidance to ensure complete, effective, and resource-efficient mitigation strategies





- Develop and deliver initial and final incident reports in accordance with DHS/CISA Federal Incident Notification Guidelines, NASA Incident Response Management IT Security Handbook, NIST SP 800-6

- Develop and provide after-action incident reports, including root cause analysis, lessons learned, etc., as requested

- Mitigate/correct security deficiencies identified during security/certification testing and/or recommend risk acceptance for the appropriate senior leader or authorized representative

- Maintain all technical details, reports, and incident status, and document all required incident response information in incident reports in NASA’s authoritative incident management system. Document all incident response activities in NASA’s authoritative incident management system

- Assist the Government in developing requirements and configurations for NASA’s authoritative incident management system and other IR tools and applications

- Prepare detailed reports, assessments, presentations, and briefings on cybersecurity incidents, the results of analyses, and recommendations as requested

- Recommend rules and policies (including defining the events to log) for Incident Detection and Incident Response tools and applications

- Support the development of weekly, monthly, quarterly, and annual incident response trends and metrics

- Develop procedures and test fail-over for system operations transfer to an alternate site based on system availability requirements

Requirements:

- Bachelor's Degree with 12 years of professional experience

- US Citizenship required

- Active TS/SCI security clearance with the ability to obtain and maintain a favorably adjudicated NASA background investigation





- Demonstrated understanding of cyber attacks and potential impacts against enterprise IT systems for IR, mitigation, and recovery efforts

- One or more DoD 8570.01-M Approved Baseline Certifications (e.g., Network+, CySA+, CISSP, GSEC, etc.)

- Must be able to work onsite in work location shown below

Location: Wallops Island, VA 23337. Due to the hands-on nature of much of our work, preference is for candidates already located in or willing to relocate at your own expense to the work location.

Why GRIMM?

GRIMM offers a comprehensive, total rewards package that includes competitive compensation and a flexible benefits package that reflects our commitment to creating a diverse and supportive workplace.

- Work with a team of skilled people who think hacking is fun

- Medical/dental/vision insurance that begins on Day 1

- $0 premium option for Medical, Dental and Vision for you and your dependents

- 401(K) Retirement Plan with a 5% company match and no vesting period

- Health & Dependent Care Flexible Spending accounts are available options

- Paid Parental Leave

- 11 paid holidays a year - including MLK Day, Juneteenth, Indigenous People's Day, and Veteran's Day

GRIMM is a pioneering cybersecurity organization led by business-savvy experts. Our services are informed by extensive experience working with advanced threats, discovering critical vulnerabilities, and demonstrating meaningful solutions for advanced problems. Our insight is built on operational experience in solving the most challenging cybersecurity problems. Our engineers, researchers, and exploit mitigation experts actively hunt for unknown and undocumented threats.

GRIMM works with government and commercial clients from various industries, services, and specialties that require the ability to uncover security gaps and areas of exposure at every level. Learn more about us at grimmcyber.com.

GRIMM promotes a Drug-Free Workplace, is an Equal Opportunity Employer, and is an Affirmative Action Employer. We participate in E-Verify.

📌 Incident Response Specialist (Telangana)
🏢 Grimm
📍 Telangana