Cybersecurity Incident Response Triage Analyst
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Cybersecurity Incident Response Triage IR Analyst working with the CIRT team at Accenture Federal Services. Monitoring, analyzing incidents, and developing response strategies to enhance cybersecurity for federal government entities.
Responsibilities:
- Actively monitor and respond to cybersecurity incidents related to alerted policy violations
- Analyze and investigate incidents to determine their nature and scope.
- Coordinate with the lead and other Cybersecurity Incident Response Teams for effective incident resolution.
- Document incidents and response activities in detail.
- Stay updated with the latest cybersecurity threats and trends.
- Assist in developing and refining incident response strategies and procedures.
- Collaborate with operations teams, legal, human resources and management to investigate security issues and interview investigation subjects to determine true and false positives.
Requirements:
- US Citizenship required
- Excellent communication skills and knowledge in incident response lifecycles, common cyber-attacks, insider-threat indicators and warnings, data loss prevention and detection mechanisms, and federal incident reporting requirements.
- Excellent communication (written and oral), attention to detail & interpersonal skills
- Experience presenting complex technical information to decision makers and leading them through the decision making process
- Work independently to deliver timely solutions without direct supervision
- 1-2 years experience in information security, or other equivalent combination of education or equivalent work experience.
- 1 year(s) of experience performing event and log analysis including one or more of the following: Anti-Virus, Intrusion Detection Systems, Firewalls, Active Directory, Web Proxies, Data loss prevention tools and other security tools found in large enterprise network environments; along with experience working with Security Information and Event Management (SIEM) solutions.
- Familiarity with various network and host-based security applications and tools, such as network and host assessment/scanning tools, network and host-based intrusion detection systems, and other security software packages.
- Familiarity with TCP/IP, common application layer protocols, and packet analysis of the same.
- Familiarity with static and dynamic malware analysis concepts.
- Experience with indicators of attack and compromise.
- Familiarity with Windows / Linux architecture and endpoint analysis of the same.
- Familiarity with basic data parsing and analysis tools, i.e., Excel, grep, sed, awk, regex, etc.
Benefits:
- Competitive salary
- Wide variety of benefits
- Professional development opportunities
Similar Jobs
Security Operations Engineer
Security Operations Engineer managing security operations and compliance for AI functions in higher education. Ensuring data protection and security in cloud environments and IT operations.
Senior Security Engineer, Incident Response
Senior Security Engineer leading the technical response to incidents and enhancing security processes for Twilio. Working across R&D Engineering and Business teams on security challenges and incident management.
SecOps Transformation Advisor
SecOps Transformation Advisor driving XSIAM revenue and consultative sales strategy for cybersecurity solutions. Engaging executive relationships and providing business value through tailored proposals.
Security Operations Engineer
Security Operations Engineer providing technical and operational support for MDR customers at Vector3. Involved in incident response, troubleshooting, and security initiatives.
Presales Security Architect – SecOps
Presales Security Architect at GuidePoint Security serving as a technical advisor. Leading technical discovery, design, and positioning in cybersecurity across the Northeast region.
Analyst, Security Operations
Analyst in Security Operations at Danaher handling security events, mentoring junior analysts, and developing relationships with Security and IT teams. Reviewing security alerts and improving security posture across a multinational corporation.
Cyber Operations Lead – Incident Response
Cyber Operations Lead responsible for managing cyber incident response operations at Chickasaw Nation Industries. Collaborating with teams to guide investigations and implement security strategies.
Senior SOC Analyst
Analista SOC Sênior responsible for security operations, monitoring, and incident response at a fintech. Collaborating with teams to secure systems and mitigate risks.
External Communications, Operations & Analytics Specialist – Experienced/Senior
Boeing seeks External Communications Specialist to shape communication strategies and engage key media stakeholders. Collaborate across teams to manage communications operations and content strategy.
Cybersecurity Operations Engineer
Cybersecurity Operations Engineer enhancing cybersecurity operations for business customers in Switzerland. Working end-to-end with customers from implementation to operations.
SOC Analyst I
SOC Analyst I monitoring and detecting cybersecurity threats for Apollo Information Systems. Collaborating with the team to protect client networks and systems.
Junior SOC Analyst
SOC Analyst - Level 1 responsible for routine security investigations at Accesa. Combining alert analysis, evidence correlation, and case documentation in a shift-based operations role.
Cybersecurity Operations – Incident Response Lead
Cybersecurity Operations Lead managing 24×7 security operations and incident response for Coastal's hybrid banking environment. Leading detection, response, and vulnerability management to protect businesses and clients.
Senior Security Operations Analyst
Security Operations Analyst monitoring and investigating security threats across enterprise systems. Collaborating with teams on incident response and threat intelligence activities.
Intermediate SecOps Engineer
Intermediate SecOps Engineer at the Eclipse Foundation managing security operations. Focused on threat detection, incident response, and operational resilience across infrastructure.
Staff Security Operations Engineer
Staff Security Operations Engineer enhancing security practices at Apollo. Collaborating with engineering teams to conduct threat modeling and drive secure software development.
SecOps Consultant
Google SecOps Consultant responsible for developing and managing Google SecOps environments. Collaborating with clients and managing services to ensure alignment with business processes.
Associate Cyber Security Operations Analyst
Join S&C Electric as an Associate Cyber Security Operations Analyst. Support cybersecurity initiatives by collaborating with technical teams and developing compliance strategies.
Senior Security Operations Analyst
Security Operations Analyst responsible for monitoring security threats and incident response for Newfold Digital. Collaborating with teams to strengthen security operations and reporting structures.
SOC Analyst
SOC Analyst monitoring client security events and responding to incidents while collaborating in a 24x7 SOC team. Seeking candidates with cybersecurity experience and a passion for information security.