Cyber Threat Advisor

TMC Technologies is in search of a Cyber Threat Advisor to support a federal client in Rosslyn, VA. The candidate must be a US Citizen with an active Secret clearance and the ability to obtain Top Secret due to federal contract requirements. Cyber Threat Advisor role will be located in Beltsville, MD and Roslyn, VA. This role supports the Cyber Incident Response Team (CIRT) as a key member of Incident Response Tiger Team. The customer requirement requires every employee to be onsite for the first 90 days. After the 90 day period, a hybrid schedule may be offered. The selected candidate must be able to support a hybrid and flexible schedule, in the event of significant cyber incident a continuous on site presence will be required. The Cyber Threat Advisor, in support of the CIRT mission, will:

• Provide Subject Matter Expert (SME) level Cyber Threat support in a 24x7x365 environment.
• Share in-depth knowledge and intelligence gained from cyber security events with stakeholders.
• Protect against and prevent potential cyber security threats and vulnerabilities.
• Provide SME level response, technical assistance and expertise for significant cyber incidents, investigations and related operational events.
• Develop and implement training programs for analysts.
• Conduct detailed research to increase awareness and readiness levels of the security operations center.
• Conduct research using a variety of enterprise sources with specific emphasis on network operations and cyber warfare tactics, techniques, and procedures.
• Collect and analyze network device integrity data for signs of tampering or compromise.
• Prepare assessments and cyber threat profiles of current events based on the sophisticated collection, research, and analysis of information.
• Conduct data analysis in support of directed assessments, anomaly investigations, long term trending and system check out.
• Conduct advanced analysis and recommend remediation steps.
• Analyze network events to determine impact.
• Conduct all-source research to determine threat capability and intent.
• Coordinate during significant cyber incidents.
• Serve as the cyber threat technical liaison to stakeholders, explaining investigation details.
• Publish after-action reports, cyber defense techniques, guidance, and incident reports.
• Review, draft, edit, update and publish cyber incident response plans.

• 
  Bachelor’s Degree and a minimum of 14 years’ experience or a Master's Degree and a minimum of 12 years' experience is required. An additional 4 years of experience may be used in lieu of degree.
• Ability to obtain Top Secret security clearance is required, can join with a Secret clearance.
• Expertise in traditional computing technologies architecture, design and security.
• Demonstrated knowledge of the Incident Response Lifecycle and how it applies to apply to cloud, legacy and hybrid environments.
• Ability to identify remediation steps for cybersecurity events.
• Experience identifying different classes and characterization of attacks and attack stages.
• Demonstrated ability to utilize and leverage forensic tools to assist in determining scope and severity of a cybersecurity incident.
• Strong organizational skills.
• Proven ability to operate in a time sensitive environment.
• Proven ability to communicate orally and written.
• Proven ability to brief (technical/informational) senior leadership.

Preferred Qualifications

Knowledge of cybersecurity frameworks and standards.
Ability to track incidents using MITRE ATT&CK and Cyber Kill Chain methodology.
Knowledge of cloud security.
Knowledge of current IT security best practices.
Knowledge of system administration, networking, and operating system hardening techniques.
Experience with reconstructing a malicious attack or activity.
Experience with scripting and coding.
Knowledge of system design and process methodologies.
Experience in developing and delivering comprehensive training programs.
Experience collaborating with cross functional teams.
Experience working in the inter-agency environment.
Ability to communicate technical concepts to executive level leadership.