CSIRT Analyst

As a CSIRT Analyst, you will play a critical role in identifying, analyzing, and responding to cyber security incidents within the organization. You will work closely with the SOC team to monitor, detect, and mitigate threats, ensuring the security and integrity of our systems and data. The ideal candidate will have a strong background in operations or incident response, along with relevant certifications and the ability to obtain a Final TOP SECRET SCI Clearance.

Responsibilities

• Monitor security alerts and events to identify potential cyber security incidents.
• Conduct initial triage and analysis of security events to determine their severity and potential impact.
• Investigate and respond to security incidents in accordance with established procedures and protocols.
• Collaborate with cross-functional teams to contain and remediate security incidents, minimizing their impact on operations.
• Document incident details, including analysis findings, actions taken, and recommendations for improvement.
• Provide timely updates and reports on incident status to stakeholders, including management and technical teams.
• Participate in incident response exercises and tabletop exercises to enhance preparedness and response capabilities.
• Stay abreast of emerging threats and vulnerabilities, sharing insights and recommendations with the broader team.
• Continuously improve incident detection and response processes through automation, tooling, and knowledge sharing.

Basic Qualifications

• Have and maintain at least one active certification: Security+ or ISC2 CISSP, or other comparable certification approved in advance by the SOC PM on a case-by-case basis.
• Bachelor's degree in Computer Science, Information Technology, or related field, or a minimum of one year of experience in operations or incident response.
• Ability to attain up to a Final TOP SECRET SCI Clearance.
• Must meet SCI eligibility (ICD 704) with no waivers or conditions.

Preferred Qualifications

• Strong analytical and problem-solving skills, with the ability to analyze and interpret security event data.
• Familiarity with security technologies and tools, including SIEM platforms, intrusion detection/prevention systems, and endpoint security solutions.
• Excellent communication and interpersonal skills, with the ability to effectively communicate technical information to non-technical stakeholders.
• Ability to work effectively in a fast-paced environment, managing multiple priorities and deadlines.

Evolver Federal is an equal opportunity employer and welcomes all job seekers. It is the policy of Evolver Federal not to discriminate based on race, color, ancestry, religion, gender, age, national origin, gender identity or expression, sexual orientation, genetic factors, pregnancy, physical or mental disability, military/veteran status, or any other factor protected by law.