Triage Analyst
Core
Initial triage and analysis of cyber threat reports and alerts to protect infrastructure and data.
Role type
Cybersecurity Triage Analyst
Builds
Incident response workflows and signal ingestion health for federal clients
Domain
Cybersecurity / National Security
Required skills
Cyber threat analysis, Alert queue monitoring, Incident remediation (automated/manual), Signal ingestion management, Escalation procedures, Playbook improvement
Preferred skills
Cloud security features, PowerShell, XDR, SIEM/SOAR, Trellix Host Based Security System, Splunk
Technologies
Microsoft tools, Trellix, Splunk, XDR, SIEM, SOAR
Responsibilities
Monitor alert queues for sensitive assets and known attacker campaigns, Perform automated and manual remediation of adverse events, Ensure health of signal ingestion across customer and third-party tools, Escalate incidents and recommend improvements to response techniques and automation playbooks
Seniority
Mid-level, hands-on IC