Incident Response Specialist

Are you looking to elevate your cyber career? Your technical skills? Your opportunity for growth? Deloitte's Government and Public Services Cyber Practice (GPS Cyber Practice) is the place for you! Our GPS Cyber Practice helps organizations create a cyber minded culture and become stronger, faster, and more innovative. You will become part of a team that advises, implements, and manages solutions across five verticals: Strategy, Defense and Response; Identity; Infrastructure; Data; and Application Security. Our dynamic team offers opportunities to work with cutting-edge cyber security tools and grow both vertically and horizontally at an accelerated rate. Join our cyber team and elevate your career.

Work you'll do

• Support clients with data protection, IoT, and overarching cloud capabilities.
• Implement core and cloud infrastructure security to manage risks and exposure.
• Perform cyber reconnaissance to illuminate a potential attack surface area.
• Provide threat and vulnerability management to federal clients and teams.
• Analyze tactical network architectures and topologies to assess security risks.
• Work with Federal clients to mitigate cyber risk and threats
• Lead the development of a mature incident response program that is integrated across the business
• Organize and deliver incident response services on a cross-section of complex projects
• Actively participate in the development of business and vendor relationships
• Participate and lead aspects of the proposal development process
• Displays both breadth and depth of knowledge regarding functional and technical issues
• Displays leadership and business judgment in anticipating client/project needs and developing alternative solutions
• Provide counseling/coaching, oversight, and support for delivery teams and staff
• Actively participate in staff recruitment and retention activities providing input and guidance into the staffing process

• Must be legally authorized to work in the United States without the need for employer sponsorship, now or at any time in the future
• Must be able to obtain and maintain the required clearance for this role
• Travel up to 10%
• Experience using cyber reconnaissance to support a federal client
• Experience working with cloud infrastructure
• Experience utilizing software asset management
• A minimum of five (3) year of experience in a Security Operations Center.
• Knowledge of information security industry and regulatory obligations (PCI DSS, SOX404, SOC1/2, ISO 27000-series, NIST Framework, etc.).
• Security tools (IPS, HIPS, Web Proxy, Open Source Intelligence, Packet Captures, Memory Analysis, Syslog, DHCP, AD, 802.1x, NAT, VPN logs, Passive DNS, and SIEM).
• Technical proficiency with MITRE ATT&CK Framework and how it's used to assess, enhance, and test security monitoring, threat detection, and mitigation activities.

• Prior professional services or federal consulting experience
• Previous Security Operations Center experience
• Experience in mobile and endpoint security
• Certifications (e.g., CompTIA Security+, CEH, CISSP)