CSOC Tier-2 Cyber Defense & Incident Response Analyst

D2 Consulting; Springfield (VA); On-site; USD 90,000 - 95,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

Accrued PTO

STD/LTD/Life Insurance

Referral Bonuses

Professional development reimbursement

Job summary

D2 Consulting is seeking a CSOC Tier 2 specialist to support 24x7 cyber incident response with malware analysis, forensic handling, and containment actions. You will coordinate with government offices, build incident timelines, and develop reports for stakeholders.

The role requires active TS/SCI clearance, DoD 8140/8570 certifications, and experience with SIEM, network protocols, and incident lifecycle management. 1 of 5 shifts is required.

Qualifications

• US citizenship and TS/SCI clearance to start.
• University degree (BA/BS) or equivalent experience.
• DoD 8140.01 / DoD 8570.01-M IAT Level II and CSSP Analyst Certification.
• TCP/IP, protocols, and network analysis techniques.
• Experience with SIEM for event analysis.

Responsibilities

• Malware and implant analysis and forensics handling for cyber incidents.
• Coordinate containment, eradication, and recovery actions as directed.
• Collaborate with SI Office, SIC, and other agencies for investigations.
• Produce security incident reports with authorities.
• Categorize incidents and events.

Skills

US Citizenship

TS/SCI clearance to start

CI Poly within 6 months

University Degree BA/BS or equivalent

4 years related work experience

DoD 8140.01 and DoD 8570.01-M IAT II /

CSSP Analyst Certification

TCP/IP and network protocols

Cyber Attack Lifecycle and MITRE ATT&K

SIEM for event analysis

Shift work availability

Education

BA/BS or equivalent experience

Job description

D2 Consulting is seeking a CSOC Tier 2 specialist to support 24x7 cyber incident response with malware analysis, forensic handling, and containment actions. You will coordinate with government offices, build incident timelines, and develop reports for stakeholders.

The role requires active TS/SCI clearance, DoD 8140/8570 certifications, and experience with SIEM, network protocols, and incident lifecycle management. 1 of 5 shifts is required.