vNOC Incident Management Lead

Clearance Level Secret Category Cyber Security Location San Antonio, Texas Onsite Workplace Public Trust: None Requisition Type: Pipeline Your Impact Own your opportunity to work with the largest government agency in the nation.
Make an impact by advancing the Department of Defense’s mission to keep our country safe and secure.
Job Description The scope of the IT GEMS contract includes a full range of information technology (IT) services which include necessary hardware, software, and ancillary, components to support enterprise-level programs and environments.
Support service areas include program management support, policy, procedures, and operations support, IT core services support, security compliance, customer and client services support, transformational IT support, and application migration support.
HOW A CYBER SECURITY ANALYST ADVISOR WILL MAKE AN IMPACT Incident Management Lead: Supports the VNOC and collaborates with the DMDC Consolidated Contact Center (CCC) and Cyber Incident Response Team on incident management.
Leads our Incident Management team and maintains our ITIL-based ITSM4Gov incident management program, ensuring alignment with DMDC's SOP.
Continuously monitors DMDC's enterprise infrastructure to ensure proactive detection and response of incidents.
Handles incidents as Severity 1 until further assessment determines otherwise to ensure swift response to critical issues.
Acts as an incident manager within 10 minutes of incident notification, ensures technical experts are engaged within 30 minutes and on-site support is dispatched within one hour, if required.
Leads and coordinates incident response efforts around the clock, ensuring incidents are managed and resolved 24/7/365 to maintain the availability and reliability of IT services.
Leads the development of After Action Reports (AARs) within 7 days of incident resolution and supports the analysis of the incident response process as part of our CSI2 approach to enhance future incident management.
Incident Reporting Lead: Leads Incident Reporting and is a key member of the Incident and Problem Management team and responsible for ensuring all cyber incidents are reported to the DMDC Incident Response (IR) team within one hour of discovery and every 24 hours until the incident is closed.
Collaborates with the DMDC IR team and VNOC Incident Managers and creates and maintains comprehensive incident reports that detail the incidents timeline, actions taken, resources involved, and outcomes.
Contributes to the continuous improvement of incident management processes with our CSI2 program, ensuring lessons learned from incidents are documented and approved enhancements are incorporated into future response strategies and applicable SOPs, TTPs, and KBAs.
WHAT YOU’LL NEED TO SUCCEED: Education/Experience: 5-8+ years of experience, BA/BS or equivalent years of experience Required Technical Skills: IAT II CompTIA Security+ For Incident Reporting Lead: Certified Ethical Hacker (CEH) or equivalent Security Clearance Level: Active DOD Secret Location: Onsite - San Antonio, TX US Citizenship Required GDIT IS YOUR PLACE: Full-flex work week to own your priorities at work and at home 401K with company match Comprehensive health and wellness packages Internal mobility team dedicated to helping you own your career Professional growth opportunities including paid education and certifications Cutting-edge technology you can learn from Rest and recharge with paid vacation and holidays