Incident Manager II

{
  "content_hash": "e77619c5e3ae292ac913bc66bcaffcd402b3ec125dad9d8284545508f8e26de0",
  "source_hash": "4a5aeaf8e606db0fdee5c36a20ed29ad470fec499808c6022a44daf73e5d58ec",
  "last_changed_at": "2026-05-29T07:08:33.097Z",
  "active_status": "active"
}

{
  "language": "en",
  "location": {
    "raw": "Arlington, VA",
    "city": "Arlington",
    "region": "VA",
    "country": "United States",
    "is_remote": false,
    "confidence": 0.9
  },
  "salary_max": null,
  "salary_min": null,
  "inferred_at": "2026-06-06T18:44:29.845Z",
  "launch_scope": {
    "reason": "english_us_canada",
    "included": true,
    "language": "en",
    "location": {
      "raw": "Arlington, VA",
      "city": "Arlington",
      "region": "VA",
      "country": "United States",
      "is_remote": false,
      "confidence": 0.9
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": null,
  "salary_period": null,
  "workplace_type": "on_site",
  "salary_currency": null
}

{}

{
  "lists": [
    {
      "text": "Responsibilities",
      "content": "\n<li>Researching and compiling known resolution steps or workarounds to enable mitigation of potential Computer Network Defense incidents within the enterprise&nbsp;</li>\n<li>Applying knowledge of the tactics, techniques, and procedures of various criminal, insider, hacktivist, and nation-state threat actors to identify and validate threats&nbsp;</li>\n<li>Applying cybersecurity concepts to the detection and defense of intrusions into small and large-scale IT networks, and conducting a cursory analysis of log data.</li>\n<li>Monitoring external data sources (e.g., Computer Network Defense vendor sites, Computer Emergency Response Teams [CERTs], SANS, Security Focus) to maintain currency of Computer Network Defense threat conditions and determine which security issues may have an impact on the enterprise&nbsp;</li>\n<li>Identifying the cause of an incident and recognizing the key elements to ask external entities when learning the background and potential infection vector of an incident</li>\n<li>Receiving and analyzing network alerts from various sources within the enterprise and determining possible causes of such alerts&nbsp;</li>\n<li>Tracking and documenting Computer Network Defense (CND) incidents from initial detection through final resolution</li>\n<li>Working with other components within the organization to obtain and coordinate information pertaining to ongoing incidents.</li>\n<li>Providing support during assigned shifts&nbsp;</li>\n"
    },
    {
      "text": "Minimum Qualifications",
      "content": "\n<li>BS in Incident Management, Operations Management, Cybersecurity, or related degree. HS Diploma with 4-6 years of incident management or cyber security experience.</li>\n<li>2+ years of directly relevant experience in cyber incident management or cybersecurity operations</li>\n<li>Knowledge of incident response and handling methodologies</li>\n<li>Knowledge of the NCCIC National Cyber Incident Scoring System to be able to prioritize triaging of incidents</li>\n<li>Knowledge of general attack stages (e.g., foot printing and scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks, etc.)</li>\n<li>Skill in recognizing and categorizing types of vulnerabilities and associated attacks</li>\n<li>Knowledge of basic system administration and operating system hardening techniques</li>\n<li>Knowledge of Computer Network Defense policies, procedures, and regulations</li>\n<li>Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non-nation-state sponsored], and third generation [nation-state sponsored])</li>\n<li>Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return-oriented attacks, and malicious code)</li>\n<li>Must be able to work collaboratively across physical locations</li>\n"
    },
    {
      "text": "Preferred Qualifications",
      "content": "\n<li>Knowledge of basic system administration and operating system hardening techniques</li>\n<li>Knowledge of Computer Network Defense policies, procedures, and regulations</li>\n<li>Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non-nation-state sponsored], and third generation [nation-state sponsored])</li>\n<li>Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return-oriented attacks, and malicious code)</li>\n"
    }
  ],
  "country": "US",
  "createdAt": 1762302819962,
  "updatedAt": null,
  "categories": {
    "team": "0008-0003",
    "location": "Arlington, VA",
    "commitment": "Full-time",
    "department": "Incident Manager",
    "allLocations": [
      "Arlington, VA"
    ]
  },
  "salaryRange": null,
  "workplaceType": "onsite"
}