Computer Emergency Response Team (CERT) Manager

Overview

The primary purpose of this position is to work as a member of the Multi State Information Sharing and Analysis Center (MS-ISAC)/Elections Infrastructure Information Sharing and Analysis Center (EI-ISAC) Computer Emergency Response Team (CERT) to manage a team of CERT Analysts who respond to cyber incidents impacting State, Local, Tribal and Territorial (SLTT) governments. This position involves critical duties and responsibilities that must continue to be performed during crisis situations and contingency operations, which may necessitate extended hours of work.

What You'll Do

• Supervise, coach and mentor CERT team members

• Perform as lead analyst on particularly high-profile cases or situations involving cyber threats affecting multiple SLTT governments

• Act as a subject matter expert on disaster recovery, incident handling, and outbreak containment

• Act as a participant or coordinating member on SLTT community events centered around CERT, computer forensics, and incident response

• Make recommendations to senior management as to when it would be appropriate to send a team on-site for incident response assistance

• Assist with identifying areas of operational improvement

• Oversee the investigation, documentation, and reporting of incident response and computer forensic cases

• Keep current with technological advances and recommend cybersecurity best practices to SLTT governments.

• Work collaboratively with other Operations team members as needed

• Communicate with senior management on important issues and developments

• Other tasks and responsibilities as assigned

What You'll Need

• Bachelor’s degree in Digital Forensics, Cybersecurity, Computer Science, or a related field*

• 4+ years’ experience in incident response, computer forensics, and/or malware analysis

• 1+ years’ experience managing people and projects in a technical field

• Strong working knowledge and implementation of various security methodologies and processes, network and host-based forensics tools, incident handling tools, mass triage and outbreak containment tools and techniques, and compromise assessment techniques

• Strong attention to detail

• Excellent interpersonal communication skills and professional demeanor

• The position is open to U.S. citizens and requires a favorably adjudicated DHS Fitness Review for Public Trust Positions**

• Must be authorized to work in the United States

It's a Plus if You Have:

• Master’s degree in Digital Forensics, Cybersecurity, Computer Science, or a related field*

• Strong knowledge of configuring and implementing technical security solutions

• Strong knowledge of planning and implementing a secure network infrastructure

• Experience delivering technical presentations and reports

• Certifications in related areas (CISSP, GCFA, GCFE, GCIH, etc.)

*Additional years of relevant experience or a combination of an Associate’s degree or equivalent and relevant experience may be substituted for the Bachelor’s degree.

**Factors that may cause a negative Fitness Review decision include:

• Criminal Conduct

• Dishonest Conduct

• Employment Misconduct

• Alcohol Abuse

• Drug Use (illegal drug use or use of a legal drug in a manner that deviates from approved medical direction) Additionally, illegal drug use includes the use of drugs that are illegal for federal purposes despite being legal in select states and countries, such as marijuana.)

• False Statements

• Financial Issues

• Have not resided in the US for three (3) of the past five (5) years