This position requires shift work including nights/weekends
Responsibilities include:
Responsible for leading incident response efforts and reporting status to stakeholders and leadership.
Maintain an understanding of the current vulnerabilities, response, and mitigation strategies used in cyber security operations
Produce reports and briefs to provide an accurate depiction of the current threat landscape and associated risk.
Investigate cyber activity targeting customer information and its infrastructure
Providing mentorship and technical education to CIRT personnel
Liaison with other government cyber threat analysis entities, such as inter-agency Cyber Threat Working Groups
Analyze and report cyber threats as well as assist in deterring, identifying, monitoring, investigating and analyzing computer network intrusions
Meet and maintain customer required Information Assurance training compliance

MANDATORY SKILLS: 6+ years of directly relevant experience
Current experience with AWS security solutions and cloud security investigations
Current incident response experience using Splunk
Previous experience with penetration testing (red/blue/purple teams)
Previous security investigation experience (OS Forensics, Network Forensics, Web Application Forensics, Cloud Forensics, etc.)
Experience as a Linux/Windows/Network administrator
Must be able to work collaboratively across agencies and physical locations
Excellent oral and verbal communication
Must be a U.S. Citizen
Must have active/current Top-Secret clearance with the ability to obtain a TS/SCI.
Must be able to receive DHS suitability prior to starting employment.

OPTIONAL SKILLS: Desired Skills:
Hands-on experience in the detection, response, mitigation, and/or reporting of cyber threats affecting client networks
Experience in computer intrusion analysis and incident response
Experience with computer network surveillance/monitoring
Knowledge and understanding of network protocols, network devices, multiple operating systems, and secure architectures
Familiarity with computer evidence seizure, computer forensic analysis, and data recovery
Experience with System log analysis
Current experience with network intrusion detection and response operations (Protect, Defend, Respond and Sustain methodology)
Current experience with cyber threats and the associated tactics, techniques, and procedures used to infiltrate computer networks
Current experience with AWS security solutions and cloud security investigations
Desired Certifications:
SANS GCIH or equivalent certification
SANS GCFA, GCFR, or equivalent certifications)
Splunk Power User or higher
AWS Certified Practitioner or higher
Certified Information Systems Security Professional (CISSP)
Cisco Certified Network Professional (CCNP), Cisco Certified Security Professional (CCSP) or similar certification required.

• A Supportive and Equitable Working Environment that is both Stimulating and Challenging
• Competitive Hourly Salary
• Unique Employee Success Sharing Program that allows ATP employees to Share in Company's Successes
• Automatic Approved Overtime (as long as contract permits)
• Retirement Pay (401K); 100% company paid, immediately vested with Profit-Sharing Component
• Company Medical Coverage Plans - HMO, Open Access, PPO plans
• Company Dental Plan - widely accepted, comprehensive, and flexible
• Progressive Overtime Policy
• Flexible Spending Account benefit
• Lucrative Referral Bonus Policy
• Holiday Scheduling that Coincides with Government Holidays
• Robust Professional Expenses & Training Program
• Computer Allowance
• Internet Allowance
• Short and Long Term Disability
• Life Insurance