Incident Response Advisor - Senior

Company

Federal Reserve Bank of Richmond

When you join the Federal Reserve—the nation's central bank—you’ll play a key role, collaborating with leading tech professionals to strengthen and protect our economic, financial and payments systems.

We invest in contemporary and emerging technology each year to support the Federal Reserve and our economy, and we’re building a dynamic team for our future.

Bring your passion and expertise, and we’ll provide the opportunities that will challenge you and propel your growth—along with a wide range of benefits and perks that support your health, wealth, and life.

In addition to competitive compensation, we offer a comprehensive benefits package that includes tuition assistance, generous paid time off, top-notch health care benefits, child and family care leave, professional development opportunities, a 401(k) match, pension, and more.

All brought together in a work environment where you can truly find balance.

About the Opportunity

The Federal Reserve System (FRS) National Incident Response Team (NIRT) has an immediate opening for an Incident Response Advisor position, reporting to a Senior Manager Information Security.

The NIRT, a national service provider for the FRS, delivers effective intrusion detection, incident response, forensics, security intelligence, threat assessment, and penetration testing services.

The role is for an experienced incident response professional.

You will be expected to be able to investigate and respond to security events within the FRS with minimal oversight.

Additionally, as you gain experience you will be expected to lead larger and more impactful incidents.

The ideal candidate will have some more specialized skills such as Security Operations Center (SOC) support, disk and/or memory forensics, phone forensics, malware analysis, and/or threat hunting skills.

Hours: The core hours are day shift in your local time zone.

You may also occasionally be required to work overnights, weekends or holidays due to high severity incident and/or coverage concerns.

 This position will have the ability to work remotely, within a commutable distance to a Federal Reserve Bank location.

What You Will Do:  


* Perform security event triage and analysis with knowledge in current security threats and techniques.


* Manage and lead security incidents and conduct incident analysis, containment, protection, mitigation, and recovery activities across the FRS.


* Perform and lead incident response workflow processes.


* Analyze all relevant data sources for attack indicators and potential network and host compromises.


* Respond to different attack vectors such as data exfiltration, DDoS, malware, insider risk, and phishing.


* Develop scripts and tools to improve the efficiency of incident detection and response processes.


* Lead investigations.


* Identify gaps/opportunities for enhancements to workflows and processes for enhancing the incident...