Incident Response Analyst - 24/7 SOC (CrowdStrike/Splunk)

KellyMitchell Group; Arlington Heights (IL); On-site; USD 44,000 - 63,000; Full time

Benefits offered by this job

ESOP

401K offered

Job summary

KellyMitchell is seeking an Incident Response Team Analyst to join a 24x7 Cyber Defense operation in Arlington Heights, IL. This 6‑month to 1‑year contract requires hands‑on IR work with CrowdStrike and Splunk, including malware analysis and forensics, with a focus on containment and recovery.

The role demands a 3+ year SOC/IR background, a CS/Cybersecurity degree or equivalent, and willingness to work nights/weekends in a dynamic, fast-paced environment.

Qualifications

• Bachelor's degree in CS/Cybersecurity or equivalent experience.
• 3+ years of experience as a SOC or Incident Response Analyst.
• Hands-on experience with CrowdStrike and Splunk.
• Experience triaging alerts and assessing severity.
• Knowledge of NIST or ISO 27001.
• Willing to work 24x7 shifts including nights/weekends.
• Located in the Chicago area or willing to relocate.

Responsibilities

• Monitor and triage security alerts and logs in Splunk and CrowdStrike.
• Investigate incidents, assess severity, and initiate IR process.
• Conduct malware analysis, network traffic analysis, and endpoint forensics.
• Assist with containment, eradication, and recovery with internal teams.
• Maintain detailed incident records and write incident reports.
• Prepare incident reports with recommendations to improve security posture.
• Share threat intelligence with cross-functional teams.
• Stay current on cybersecurity threats, trends, and best practices.

Skills

SOC experience

Incident response

Malware analysis

Endpoint forensics

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

CrowdStrike

Splunk

Job description

KellyMitchell is seeking an Incident Response Team Analyst to join a 24x7 Cyber Defense operation in Arlington Heights, IL. This 6‑month to 1‑year contract requires hands‑on IR work with CrowdStrike and Splunk, including malware analysis and forensics, with a focus on containment and recovery.

The role demands a 3+ year SOC/IR background, a CS/Cybersecurity degree or equivalent, and willingness to work nights/weekends in a dynamic, fast-paced environment.