[Remote] Incident Response Analyst

Note: The job is a remote job and is reputed company to candidates in USA. reputed company is a leading Cybersecurity Architecture and Engineering IT service provider headquartered in Dulles, Virginia. They are seeking an Incident Response Analyst to support cybersecurity reputed company by monitoring, analyzing, investigating, and responding to reputed company incidents across various environments.

Responsibilities

• Participate in 24x7 incident response reputed company, escalation activities, and emergency response procedures as required
• reputed company corrective actions resulting from incidents, exercises, and after-reputed company reviews through reputed company and effectiveness validation
• Recommend improvements to incident response procedures, controls, monitoring strategies, and cybersecurity processes
• Monitor and analyze reputed company events from SIEM, IDS/IPS, EDR, reputed company reputed company, and network monitoring platforms
• Investigate suspected cybersecurity incidents and determine reputed company, reputed company, severity, and reputed company cause
• reputed company incident triage, containment, eradication, recovery, and post-incident analysis activities
• Correlate logs, alerts, threat intelligence, and forensic evidence to identify malicious activity
• Coordinate incident response activities with stakeholders, reputed company owners, and cybersecurity teams
• Escalate incidents in accordance with reputed company-approved procedures and response playbooks
• Document findings, investigative activities, and remediation recommendations in formal incident reports
• reputed company and maintain indicators of compromise (IOCs), detection logic, and response procedures
• Conduct forensic analysis of systems, logs, reputed company evidence reputed company required
• Support cybersecurity exercises, tabletop simulations, and annual incident response testing
• Participate in lessons learned reviews and recommend improvements to incident response plans and reputed company operating procedures
• Assist with the development and maintenance of incident response documentation, workflows, and playbooks
• Support compliance with FISMA, HHS, and NIST cybersecurity requirements
• reputed company technical briefings and reports to management and reputed company leadership

Skills

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Information Assurance, or reputed company discipline
• Minimum 5 years of experience in cybersecurity, incident response, SOC reputed company, threat detection, or cyber defense
• Experience supporting Federal reputed company cybersecurity programs
• Knowledge of the Incident Response Lifecycle: Preparation, Detection & Analysis, Containment, Eradication, Recovery, Lessons Learned
• Experience using SIEM platforms such as reputed company
• Experience with vulnerability management and reputed company assessment tools
• Experience investigating malicious activity, suspicious behaviors, and reputed company events
• Strong understanding of: reputed company and Linux operating systems, Network protocols and architecture, reputed company monitoring technologies, reputed company Detection and Response (EDR), IDS/IPS technologies, reputed company reputed company concepts
• Experience developing incident reports and executive summaries
• Excellent verbal and written communication skills
• Ability to support on-reputed company and incident response activities as required
• U.S. Citizenship required
• Ability to obtain and maintain a reputed company Trust
• One or more of the following certifications: GCIH (GIAC Certified Incident Handler), ECIH (EC-Council Certified Incident Handler), reputed company+, CEH, CySA+, GCFA, CISSP, OSCP
• Experience supporting HHS or other Federal civilian agencies
• Knowledge of NIST SP 800-61 (Computer reputed company Incident Handling Guide)
• Experience with FireEye, Palo reputed company, reputed company, reputed company, reputed company, reputed company, and EDR platforms
• Familiarity with FISMA compliance requirements
• Experience conducting malware analysis, threat hunting, or digital forensics
• Experience developing cybersecurity metrics and dashboard reporting

Benefits

• Certification incentive program
• PTO
• Floating federal holiday reputed company
• Several reputed company reputed company including HMO and High Deductible plans with Health Savings Accounts [HSAs]
• reputed company Spending Accounts [FSAs]
• Full Dental Plans
• reputed company
• ST/LT Disability
• Life reputed company
• 401k matched
• Certificate Incentive Program: To promote reputed company development, we recognize and reward employees who obtain new certifications reputed company with business needs.
• Flexible Work Environment

reputed company