Incident Response Analyst — Secret Clearance, GovCon

Xcelerate-Solutions-5; Alexandria (VA); On-site; USD 94,000 - 127,000; Full time

Job summary

Xcelerate Solutions is seeking an Incident Response Analyst to support CyberPRIMES cybersecurity, privacy, records and information management, and related enterprise support for DHRA, including DMDC and OUSD(P&R). Location: Alexandria, VA and Seaside, CA.

Responsibilities include the full incident lifecycle from preparation to recovery, responding to NIPR and SIPR incidents, coordinating with SOC analysts and government stakeholders, and maintaining incident records and reporting.

Qualifications

• Bachelor’s degree and five years of experience.
• U.S. Citizen required.
• Active Secret clearance when duties require classified information or SIPRNet access.

Responsibilities

• Support preparation, detection, analysis, containment, eradication, recovery, and post-incident activities for cybersecurity events and incidents.
• Respond to incidents affecting NIPR and SIPR environments and support evidence collection and preservation.
• Coordinate with SOC analysts, Cybersecurity Service Providers, system owners, technical teams, and Government stakeholders.
• Maintain incident records, timelines, evidence, status updates, and required event and incident reporting.
• Support after-hours response with one-hour recall when assigned.
• Perform proactive monitoring and analysis across SIEM, endpoint, firewall, IDS/IPS, web-security, antispam, malware-prevention, and related systems; recognize intrusion attempts and support timely threat mitigation.

Skills

Incident response

Cybersecurity

SIEM monitoring

Coordination

Education

Bachelor’s degree

Job description

Xcelerate Solutions is seeking an Incident Response Analyst to support CyberPRIMES cybersecurity, privacy, records and information management, and related enterprise support for DHRA, including DMDC and OUSD(P&R). Location: Alexandria, VA and Seaside, CA.

Responsibilities include the full incident lifecycle from preparation to recovery, responding to NIPR and SIPR incidents, coordinating with SOC analysts and government stakeholders, and maintaining incident records and reporting.