CIRT Tier 2 Analyst / Active Secret
Tasks
- Analyze logs from host EDR firewall IDS servers
- Analyze malicious scripts and code
- Analyze network traffic for anomalous activity
- Classify cyber security alerts
- Contain and remediate suspicious activity
- Coordinate incident reporting to CISA
- Create tickets and initiate workflows
- Detect cyber security events and incidents
- Manage hotline and email inboxes
- Monitor and respond with SOAR platform
- Perform forensic analysis of host artifacts network traffic email content
- Perform incident triage and analysis
- Perform malware analysis and generate IOCs
- Submit alert tuning requests
Perks/Benefits
- N/A
Skills/Tech-stack
Cyber Threat | Cyber Threat Intelligence | D3FEND | Defender for Endpoint | Detection and Response | Digital forensics | Elastic | Endpoint Detection and Response | Endpoint detection | IOC integration | Incident Response | Malware analysis | Microsoft Defender | Microsoft Defender for Endpoint | Microsoft Sentinel | Mitre Attack | Network Traffic | Network Traffic Analysis | QRadar | SIEM | SOAR | ServiceNow | Splunk | Threat Intelligence | Threat hunting | Traffic analysis
Education
Roles
Related jobs
-
Cybersecurity Analyst USD 110K-140KAccess Management | Alert triage | Application control | Audit Logging | Compliance EvidenceEntry-level Full TimeEl Segundo, California, United States9h ago
-
Senior Cyber Security Analyst-Cleared USD 115K-160KChange Control | Configuration Management | Continuous Monitoring | Incident Response | NIST SPSenior-level Full TimeCharlottesville, VA, Charlottesville, VA, US | …16h ago
-
Senior Security Engineer - Detection and Response USD 235K-255KAWS | AWS Config | AWS Organizations | CSPM | CloudTrailAnnual bonus program | Comprehensive benefits package | Hybrid work environment | Incident on call rotation participationSenior-level Full TimeUnited States - Remote R17h ago
-
Access Control | Account Permissions | Application Security | Awareness Training | Cyber intelligenceEntry-level Full TimeTexas-Austin1d ago
-
Senior Cyber Security Analyst USD 104K-172KCyber Incident Triage | Cyber incident | Cybersecurity monitoring | Database security | Event CorrelationHealth insurance | Holiday pay | Learning and development | Life insurance | Long-term disabilitySenior-level Full TimeUSA-CO-Denver1d ago
-
Principal Information Security Analyst USD 116K-194KAccess Management | Credentialing | Identity and Access Management | Identity and access | JiraFlexible shiftsSenior-level Full TimeUSA-VA-Chantilly1d ago
-
Weapons & Tactics (W&T) Operator USD 110K-130KARP | Arkime | Bash | C# | C++Onsite work | Travel up to 25 percentMid-level Full TimeScott AFB, IL, United States1d ago
-
All-source research | Attack Characterization | Autopsy | Chain of Custody | Code AnalysisSenior-level Full TimeArlington, VA1d ago
-
Excel | Geopolitical risk | Monte Carlo | Monte Carlo Simulation | Network AnalysisCareer development support | Certification reimbursement | Discretionary time off | Flexible-hybrid work | Health/Vision/Dental benefitsSenior-level Full TimeHuntsville, Alabama, United States1d ago
-
FCC - SOC Analyst USD 100K-133KDNS | Detection and Response | Endpoint Detection and Response | Endpoint detection | HTTP24x7 operations schedule | Remote workMid-level Full TimeUnited States - Remote R1d ago
-
FCC - Threat Intelligence / Threat Hunting Analyst USD 86K-145KCloud Security | Cloud security monitoring | Cybersecurity operations | Data Analysis | Detection engineeringPublic Trust Clearance | Remote workMid-level Full TimeUnited States - Remote R1d ago
-
FCC - Vulnerability Management Analyst USD 100K-130KCloud Security | Configuration Compliance | Continuous Monitoring | Cybersecurity | Hybrid CloudRemote workMid-level Full TimeUnited States - Remote R1d ago
-
FCC - Security Compliance / RMF Analyst USD 100K-136K800-37 | 800-53 | Archer | Continuous Monitoring | Control AssessmentPublic Trust Clearance | Remote workMid-level Full TimeUnited States - Remote R1d ago
-
IT Specialty Analyst - Cybersecurity Risk USD 80K-133KCOBIT | Cybersecurity | Exception management | Governance Risk | Governance Risk and Compliance401k or 403b employer match | Access to CEUs | Adoption, Fertility and Surrogacy Reimbursement | Emergency backup care | Legal Resources PlanMid-level Full TimeVirginia Remote, United States R1d ago
-
ACAS | Assessment and Authorization | Certification testing | Continuous Monitoring | Cybersecurity401k matching | 9/80 work schedule | Health insurance | Paid time offSenior-level Full TimeCOAU01, United States1d ago
-
Engineer I - Cyber, Third Party Risk Engineer USD 95K-127K800-53 | Access Control | Application Firewall | Bash | Cybersecurity Framework401k matching | Dental insurance | Employee volunteer program | Medical insurance | Time offMid-level Full TimeOH - Columbus, United States1d ago
-
Security Analyst USD 74K-111KActive Directory | Cloud Security | Cloud workloads | EDR | Email Security401k matching | Confidential counseling | Employee networks and community support | Financial and legal advice | Gym membershipMid-level Full TimeSun Prairie, WI, USA, United States R1d ago
-
Cybersecurity Expert, SOC & Platform Operations (FedRAMP required - Washington DC, or Cambridge, MA) USD 146K-232KArtificial Intelligence | Automation | Cloud Security | FedRAMP | Hybrid Environment401k match | Education reimbursement | HSA | PTOSenior-level Full TimeWashington - B3 901 15th St …1d ago
-
Sr. Threat Analyst | Remote, USA USD 116K-159KActive Directory | Advanced Persistent Threats | Antivirus | Application Firewalls | Brute ForceProfessional training resources | Remote work | Volunteer opportunities | Work-life balanceSenior-level Full TimeOverland Park, KS, United States R1d ago
-
Product Champion - 28478 USD 144K-190KAmazon Web Services | Apache Superset | Azure | Cloud platform | Cyber Operations10 percent 401k match | 100 percent employer paid healthcare | Education training allowance | Generous PTO | Paid HolidaysSenior-level Full TimeFort Meade, MD, Maryland, United States1d ago
-
Security Operations Analyst USD 81K-110KCybersecurity | Detection engineering | Endpoint Forensics | Event management | Forensic InvestigationMid-level Full TimeUS Remote, United States R1d ago
-
ME00590-Reverse Engineer 4 USD 170K-215KAdvanced persistent threat | Assembly | Computer Networking | Indicator of Compromise | Malware analysisGroup medical plan | Paid Holidays | Paid dental | Paid life insurance | Paid time offSenior-level Full TimeFort Meade, MD1d ago
-
Business Continuity | Crisis management | Data Manipulation | Data Visualization | ESRI401k match | Disability insurance | Life insurance | Medical/Dental/Vision | Paid time offEntry-level Full TimeAustin, Texas, United States1d ago
-
Senior Security Compliance Manager USD 175K-224K800-37 | 800-53 | AI RMF | AWS | Agile project managementSenior-level Full TimeUnited States1d ago
-
Adversary Tactics Techniques Procedures | Adversary tactics | Cyber Security | Cyber Threat | Cyber Threat IntelligenceSenior-level Full TimePennsylvania, USA; United States2d ago