AOUSC - Cybersecurity Triage Analyst

cFocus Software Incorporated; Washington (District of Columbia); Hybrid; USD 70,000 - 100,000; Full time

Job summary

cFocus Software Incorporated in Washington, DC is seeking a Cybersecurity Triage Analyst (Tier 1) to support AOUSC. The role is hybrid with onsite in Washington, DC, and requires a Public Trust clearance.

You will perform initial triage of security incidents, analyze log data with SIEM, and coordinate with security operations to escalate when criteria are met. A strong foundation in network protocols and EDR tools is preferred.

Qualifications

• Active Public Trust clearance.
• B.S. Computer Science, Information Technology, or related field.
• 2+ years of experience in security operations.
• 1 year of experience using Endpoint Detection and Response (EDR) to conduct incident response.
• Able to effectively search using a SIEM to analyze log data and conduct initial triage of security incidents.
• Strong foundational understanding of network protocols, log analysis and endpoint detection and response tools.
• Able to follow SOPs and elevate incidents based on defined criteria.

Education

B.S. Computer Science, Information Technology, or a related field

Tools

EDR

SIEM

Job description

cFocus Software seeks a Cybersecurity Triage Analyst (Tier 1) to join our program supporting the Administrative Office of the United States Courts (AOUSC). This position is Hybrid with the onsite location being in Washington, DC. This position requires a Public Trust clearance.

Qualifications

• Active Public Trust clearance
• B.S. Computer Science, Information Technology, or a related field
• 2+ years of experience in security operations
• 1 year of experience using Endpoint Detection and Response (EDR) to conduct incident response.
• Able to effectively search using a SIEM to analyze log data and conduct initial triage of security incidents.
• Strong foundational understanding of network protocols, log analysis and endpoint detection and response tools.
• Able to follow SOPs and elevate incidents based on defined criteria.