Incident Response Analyst Mid
Core
Manage active cyber security investigations for US federal agencies, identifying root causes and producing documentation for legal/investigative authorities.
Role type
Mid-level Incident Response Analyst (CIRT)
Builds
Security incident response documentation and evidence for federal clients
Domain
US Federal Government / Cybersecurity
Required skills
Incident response investigation, root cause analysis, evidence handling, forensics (file system, memory, network logs), containment strategies, remediation coordination, post-incident recommendations, mentoring junior analysts
Preferred skills
Concurrent case management, EDR platform usage, technical communication to non-technical stakeholders
Technologies
Windows, Linux, Cloud environments, EDR platforms
Responsibilities
Respond to information system security incidents using government tooling; Produce documentation and evidence for authorized personnel; Support advanced analysis of data file system artifacts, memory, and network logs; Assist in scoping and containing compromises across Windows, Linux, and cloud environments; Coordinate with system owners and ISSOs during containment and remediation; Support email trace, purge, and data spillage sanitization; Mentor junior CIRT analysts on evidence handling and case documentation standards
