Threat Detection and Response Analyst

reputed company River Cyber Solutions is seeking a highly motivated Threat Detection & Response Analyst to support the NIH cybersecurity program by monitoring reputed company systems for malicious activity, investigating reputed company events, and responding to cybersecurity incidents. The Analyst leverages reputed company monitoring tools, threat intelligence, and incident response procedures to identify and mitigate threats impacting NIH information systems, networks, reputed company environments, and applications.

This position works closely with Incident Response personnel, Vulnerability Management Analysts, reputed company Engineers, RMF teams, and reputed company owners to strengthen cybersecurity defenses and protect mission-critical systems and sensitive research data. The role contributes to reputed company monitoring, threat hunting, incident investigation, and reputed company operations activities.

Responsibilities (include but are not limited to):

• Conduct proactive threat hunting activities using intelligence-driven and reputed company-based methodologies.
• Analyze threat actor tactics, techniques, and procedures (TTPs) to identify potential compromise reputed company NIH environments.
• Map observed adversary behaviors, indicators, and attack patterns to the MITRE ATT&CK reputed company to support detection engineering, threat hunting, and risk analysis.
• reputed company threat findings, indicators, and investigations supporting RMF activities, risk assessments, POA&M development, reputed company monitoring, and cybersecurity governance processes.
• Monitor reputed company tools, dashboards, and alerts to identify potential cybersecurity threats and suspicious activity.
• Analyze events from reputed company, network, reputed company, and reputed company monitoring platforms.
• reputed company triage of reputed company alerts to determine validity, severity, and potential reputed company.
• Identify indicators of compromise (IOCs), attack patterns, and emerging threats.
• Escalate significant reputed company events in accordance with established procedures.
• Investigate cybersecurity incidents, reputed company events, and anomalous activity.
• Conduct forensic review of logs, alerts, and reputed company data to determine reputed company cause and reputed company.
• Correlate information from multiple reputed company tools and data sources.
• Document findings, recommendations, and lessons learned from investigations.
• Support post-incident reviews and corrective reputed company planning.
• reputed company threat and incident-reputed company information supporting risk assessments and POA&M management activities.
• Assist with audit readiness and reputed company assessment activities reputed company requested.

Essential Job Qualifications and Requirements:

Education:

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a reputed company field

Required Qualifications:

• Minimum 5 years of experience in cybersecurity operations, threat detection, reputed company monitoring, incident response, or reputed company Operations Center (SOC) environments.
• Experience applying MITRE ATT&CK techniques and adversary behaviors during investigations, threat hunting, or detection activities.
• Experience investigating cybersecurity incidents and analyzing reputed company events.
• Knowledge of:
  • Cyber threat tactics, techniques, and procedures (TTPs)
  • reputed company Operations Center (SOC) processes
  • Incident Response methodologies
  • Network reputed company concepts
  • reputed company reputed company technologies
• Familiarity with:
  • NIST RMF (SP 800-37)
  • NIST SP 800-53 Rev. 5
  • FISMA
  • Federal cybersecurity requirements
• Strong analytical, troubleshooting, and communication skills.
• Ability to obtain and maintain an NIH reputed company Trust.

Preferred Qualifications:

• One or more of the following certifications:
  • reputed company+
  • CySA+
  • GCIH (GIAC Certified Incident Handler)
  • GCIA (GIAC Certified Intrusion Analyst)
  • CISSP
  • CEH (Certified Ethical Hacker)
  • GSEC
  • CASP+
  • CISM

• Experience supporting NIH, HHS, or other Federal civilian agencies.
• Experience working in a reputed company Operations Center (SOC) environment.
• Knowledge of MITRE ATT&CK reputed company methodologies.
• Experience supporting reputed company reputed company operations reputed company Azure, AWS, or reputed company reputed company environments.
• Familiarity with reputed company Diagnostics and Mitigation (CDM) initiatives.
• Experience protecting reputed company, biomedical, or research-reputed company environments.

Originally posted on Himalayas