Incident Response Advisor - Senior

Company

Federal Reserve Bank of Richmond

When you join the Federal Reserve—the nation's central bank—you’ll play a key role, collaborating with leading tech professionals to strengthen and protect our economic, financial and payments systems.

We invest in contemporary and emerging technology each year to support the Federal Reserve and our economy, and we’re building a dynamic and diverse team for our future.

Bring your passion and expertise, and we’ll provide the opportunities that will challenge you and propel your growth—along with a wide range of benefits and perks that support your health, wealth, and life.

In addition to competitive compensation, we offer a comprehensive benefits package that includes tuition assistance, generous paid time off, top-notch health care benefits, child and family care leave, professional development opportunities, a 401(k) match, pension, and more.

All brought together in a flexible work environment where you can truly find balance.

About the Opportunity

The Federal Reserve System (FRS) National Incident Response Team (NIRT) has an immediate opening for an Incident Response Advisor, Senior position, reporting to a Senior Manager Information Security.

 The NIRT, a national service provider for the FRS, delivers effective intrusion detection, incident response, forensics, security intelligence, threat assessment, and penetration testing services.

The role is for an experienced incident response professional.  You will be expected to be able to investigate and respond to security events within the FRS with minimal oversight.  Additionally, as you gain experience you will be expected to lead larger and more impactful incidents.  The ideal candidate will have some more specialized skills such disk and/or memory forensics, phone forensics, malware analysis, and/or threat hunting skills. 

Hours: Are typically the core business hours in your locality.  There may be limited periods when you need to work nights and/or weekends if there is a major security incident occurring. 

What You Will Do:


* Perform security event triage and analysis with knowledge in current security threats and techniques.


* Manage and lead security incidents and conduct incident analysis, containment, protection, mitigation, and recovery activities across the FRS.


* Perform and lead incident response workflow processes.


* Analyze all relevant data sources for attack indicators and potential network and host compromises.


* Respond to different attack vectors such as data exfiltration, DDoS, malware, insider risk, and phishing.


* Develop scripts and tools to improve the efficiency of incident detection and response processes.


* Lead investigations.


* Identify gaps/opportunities for enhancements to workflows and processes for enhancing the incident response lifecycle.


* Support cross-team projects to help implement cybersecurity improvements.


* Provide subject matter expe...