This site uses cookies. To find out more, see our Cookies Policy

Incident Response Specialist, Mid in McLean, VA at Booz Allen Hamilton Inc.

Date Posted: 3/21/2019

Job Snapshot

  • Location:
    McLean, VA
  • Job Type:
  • Experience:
    Not Specified
  • Date Posted:
  • Employee Type:

Job Description

Job Number: R0048157

Incident Response Specialist, Mid

Key Role:

Serve as an incident responder and first line of the firm’s Cyber defense, maintain responsibility for identifying and responding to security threats. Operate in a 12/5 operations center environment responsible for incident confirmation, response, data collection, investigation, and analysis. Leverage knowledge of computer and network architecture to provide analysis during investigations identifying adversarial activity and methods for future detection and prevention. Use a combination of open source research, network and host forensic analysis, log review and correlation, and pcap analysis to complete investigations. Compose and present reports on findings to leadership for intrusion incidents. Manage an incident life cycle ensuring that all investigations are current and completed.

Basic Qualifications:

-1+ years of experience as an intern working within a corporate Cybersecurity organization

-Experience with scripting in JavaScript or Python

-Experience with TCP/IP networking protocols

-TS/SCI clearance

-BA or BS degree


Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; TS/SCI clearance is required.

We’re an EOE that empowers our people—no matter their race, color, religion, sex, gender identity, sexual orientation, national origin, disability, veteran status, or other protected characteristic—to fearlessly drive change.


Your Career is Waiting.

Get job alerts. Learn about new work and upcoming events. Share open roles with friends and colleagues.
Our Talent Network is your opportunity hub.

Get Answers and Access.

Need more information? Find it in our FAQs.

Application already in-process? Log in to keep going.