Incident Response Analyst

DSE Office, USA, North Charleston, 2155 Eagle Dr. Suite 100 North Charleston, SC 29406 , Suite 100, South Carolina, United States

Full Time Entry-level / Junior USD 65K - 209K

KBR, Inc.

View all jobs at KBR, Inc.

Apply now Apply later

Posted 7 hours ago

Title:

Incident Response Analyst

Positions Contingent on Contract Award

KBR is actively seeking skilled professionals across a variety of high-impact cybersecurity roles—from Incident Response and Cyber Hunt to Digital Forensics, Insider Threat, Continuous Monitoring, and Red/Blue Team Operations.

Incident Response Analyst

Job Description:

The Incident Response Analyst is responsible for detecting, analyzing, investigating, and responding to cybersecurity incidents within NIWC CSSP environments. This role plays a critical role in network defense, digital forensics, threat analysis, and remediation efforts to ensure the integrity and security of DoD information systems. The analyst will work alongside SOC teams, forensic investigators, and cyber threat intelligence analysts to assess security events and mitigate cyber threats in a t...

Key Responsibilities:

- Monitor security alerts and system logs from SIEM tools, IDS/IPS, firewalls, and endpoint security solutions to detect potential security incidents.

- Analyze network traffic, system logs, and endpoint behaviors to identify indicators of compromise (IoCs) and signs of malicious activity.

- Triage and investigate security incidents, ensuring proper categorization and impact assessment.

- Perform forensic analysis on compromised systems, examining artifacts, log files, and malware to determine attack vectors.

- Respond to active cybersecurity threats, including ransomware, phishing, insider threats, and advanced persistent threats (APTs).

- Coordinate with USCYBERCOM, NIWC CSSP teams, and other DoD entities to ensure accurate reporting and response to cybersecurity incidents.

- Develop and implement security countermeasures to mitigate threats and prevent future attacks.

- Ensure proper documentation of security events and incidents in accordance with DoD policies and CJCSM 6510.01B.

- Create detailed incident reports, root cause analysis (RCA), and lessons learned documentation for executive leadership and cybersecurity stakeholders.

- Maintain and update incident response SOPs to align with evolving cybersecurity threats and best practices.

- Provide 24/7 support for critical security incidents as part of an on-call rotation.

- Conduct threat hunting activities to proactively identify security vulnerabilities and adversary activity.

- Collaborate with vulnerability management teams to prioritize remediation of exploited weaknesses.

- Train and mentor junior analysts in incident response methodologies and best practices.

Qualifications

Information Systems Security Specialist I-III

Education / Experience Level I: High School Diploma or GED; Experience: Two (2) years of practical experience demonstrating competency in Cybersecurity or related experience.