Cybersecurity Incident Response Triage Pro

Accenture; Arlington (VA); On-site; USD 57,000 - 109,000; Full time

Job summary

Accenture Federal Services seeks a Cybersecurity Incident Response Junior Analyst and Triage Analyst to join the CIRT team within the CISO organization. The role involves monitoring, qualifying, and triaging alerts from SIEM, security sensors, tickets, and walk-ins, with collaboration across incident response and operations teams.

Requirements include US citizenship, 1–2 years in information security, and familiarity with security tools and network protocols.

Qualifications

• 1–2 years of experience in information security or equivalent education/experience.
• Experience performing event and log analysis including Anti-Virus, IDS, Firewalls, AD, Web Proxies, DLP and other security tools.
• Familiarity with TCP/IP, protocols, packet analysis and malware analysis concepts.
• Experience with indicators of attack and compromise.

Responsibilities

• Actively monitor and respond to cybersecurity incidents related to alerted policy violations.
• Analyze and investigate incidents to determine their nature and scope.
• Coordinate with the lead and other Cybersecurity Incident Response Teams for effective incident resolution.
• Document incidents and response activities in detail.
• Stay updated with the latest cybersecurity threats and trends.
• Assist in developing and refining incident response strategies and procedures.
• Collaborate with operations, legal, HR and management to investigate security issues.

Skills

US Citizenship

Information security

SIEM

Event/Log analysis

Windows/Linux

Networking basics

Enduser communication

Analytical thinking

Regex

Tools

SIEM solutions

grep

sed

awk

Job description

Accenture Federal Services seeks a Cybersecurity Incident Response Junior Analyst and Triage Analyst to join the CIRT team within the CISO organization. The role involves monitoring, qualifying, and triaging alerts from SIEM, security sensors, tickets, and walk-ins, with collaboration across incident response and operations teams.

Requirements include US citizenship, 1–2 years in information security, and familiarity with security tools and network protocols.