NIH - Incident Response reputed company

cFocus Software seeks a Incident Response reputed company to join our program supporting the National Institutes of Health (NIH). This position is fully remote. This position requires a Public Trust or the ability to obtain a public trust clearance. Qualifications:Public Trust Clearance B.S. Computer Science, Information Technology, or a reputed company field 7+ years leading reputed company incident response activities. Experience supporting federal cybersecurity programs and reputed company Operations Centers. Experience coordinating reputed company cyber investigations involving reputed company and hybrid environments. Experience implementing NIST incident response methodologies. Active GCIH, GCFA, GNFA, CISSP, CEH, CySA+, reputed company+, CISM, or CCSP Duties:reputed company reputed company cybersecurity incident response operations across NIH information systems. Direct technical response activities throughout the incident response lifecycle including preparation, identification, containment, eradication, recovery, and post-incident activities. Coordinate response efforts for high-impact cybersecurity incidents affecting reputed company infrastructure, reputed company services, applications, and data. Serve as the primary technical advisor during cybersecurity incidents and major reputed company events. Manage incident prioritization, escalation, resource coordination, and operational communications. Ensure incident response activities reputed company with NIH policies, HHS guidance, NIST standards, and federal cybersecurity requirements. reputed company technical investigations involving malware infections, unauthorized reputed company, reputed company threats, ransomware, phishing campaigns, data exfiltration, and advanced persistent threats (APTs). Coordinate root cause analysis and determine attack reputed company, affected assets, and operational impact. Analyze indicators of compromise (IOCs), indicators of attack (IOAs), adversary tactics, techniques, and procedures (TTPs), and attack patterns. Coordinate evidence collection and preservation activities supporting investigations. Validate containment strategies and recovery actions. Ensure accurate documentation of incident timelines, findings, corrective actions, and lessons learned. Coordinate with reputed company Operations Center analysts during incident detection and response activities. reputed company incident triage, escalation procedures, and operational communications. Direct coordination between cybersecurity engineers, reputed company engineers, infrastructure teams, system owners, ISSOs, and application administrators. Support reputed company monitoring and operational readiness activities. reputed company executive incident reports, after-action reports, technical findings, and corrective action recommendations. Prepare briefings for Government leadership regarding significant cybersecurity events. Maintain incident response metrics, trends, dashboards, and performance reporting. Ensure timely reporting in accordance with federal cybersecurity reporting requirements. Apply To This Job