CSOC Tier 3: Cyber Incident Responder & Malware Analyst

RISA; Springfield (VA); On-site; USD 87,000 - 95,000; Full time

Benefits offered by this job

Medical, dental, and vision insurance

401(k) and Roth

Paid Time Off

11 paid Federal Holidays

Job summary

RISA in Springfield, VA is seeking an Incident Responder / Malware Analyst (CSOC Tier 3) to join the on-site incident response team defending a federal customer. You will lead containment, eradication, and recovery efforts and perform malware analysis and forensics.

This role requires US citizenship, active TS/SCI clearance, and the ability to obtain a government polygraph. The position supports 24x7 operations and offers a competitive salary and benefits.

Qualifications

• Bachelor's degree in a field applicable to the position plus 6 years of relevant experience (equivalents accepted – Master’s + 4, Associate’s + 8, or HS diploma + 10)
• DoD 8140.01 / 8570.01-M IAT Level II and CSSP Incident Responder; IAT Level III and CSSP Incident Responder must be held or obtained within six months of start]
• Hands-on incident response: containment, eradication, and recovery.
• Host, network, and memory forensics, and malware analysis.
• Documentation disciplined enough that every action and analysis can be reconstructed from the ticket.

Responsibilities

• Implement containment measures during incidents - IP and domain blocks, account disablement - at Government direction.
• Perform digital media analysis on host, server, and network data, including volatile and non-volatile memory.
• Perform malware analysis and reverse engineering, and develop signatures and indicators of compromise.
• Categorize incidents, build timelines, and brief stakeholders on adversary activity and response actions.
• Coordinate with counterintelligence, insider threat, and law enforcement partners on advanced investigation and triage.
• Develop and, when authorized, run custom scripts and tools to collect and analyze data.
• Write incident investigation reports covering the full lifecycle of each incident, with corrective and TTP recommendations.
• Contribute to daily and weekly CSOC reporting, and quality-check a share of closed Tier 2 tickets each week.

Skills

Incident response

Malware analysis

Forensics

US citizenship

Active TS/SCI clearance

Government polygraph readiness

Education

Bachelor's degree in a field applicable to the position

Master's degree (nice to have)

Job description

RISA in Springfield, VA is seeking an Incident Responder / Malware Analyst (CSOC Tier 3) to join the on-site incident response team defending a federal customer. You will lead containment, eradication, and recovery efforts and perform malware analysis and forensics.

This role requires US citizenship, active TS/SCI clearance, and the ability to obtain a government polygraph. The position supports 24x7 operations and offers a competitive salary and benefits.