Systems Engineering Senior Associate, CSIRT (TS/SCI Clearance)
Core
Incident Response Analyst for US Government Cloud Security Operations, investigating cyber events and performing forensics in SNS Cloud environments.
Role type
Senior IC incident response analyst (cybersecurity)
Builds
Security monitoring, incident response, and threat hunting for US Government agencies
Domain
Cybersecurity / National Security / Cloud Infrastructure
Required skills
incident response, forensics, malware analysis, intrusion detection, network security, system security, SIEM analysis, log analysis, ticketing management, stakeholder coordination, problem solving, threat landscape knowledge
Preferred skills
AWS Cloud, Azure Sentinel, ElasticStack, TCP/IP protocols, Mac OSX/Windows/Linux administration, cloud security controls, dashboard creation (Splunk/Kibana/Grafana), data query languages (SQL/SPL/GraphQL), scripting (Bash/Python), IDPS monitoring, system forensics, security certifications (CISSP/GCFR/GCIA/GCIH)
Technologies
AWS, Azure Sentinel, ElasticStack, Splunk, Kibana, Grafana, SQL, SPL, GraphQL, Bash, Python
Responsibilities
Respond to and investigate cybersecurity events within SNS Cloud environments, track and document security events in a ticketing system, analyze log data for malicious activity in a SIEM, coordinate incident response actions for high-priority issues, escalate as appropriate, provide regular updates to senior leaders, automate workflows and processes, hunt for undetected indicators of compromise, provide 24x7 on-call support, travel to customer sites occasionally
Seniority
Senior, hands-on IC
