Incident Response Analyst, Senior

MBL Technologies; Washington (District of Columbia); Remote; USD 120,000 - 170,000; Full time

Benefits offered by this job

Remote work

Job summary

MBL Technologies, Inc. is seeking a Senior Incident Response Analyst to support cybersecurity incident response operations for a federal government client. You will identify, investigate, contain, and remediate incidents while coordinating with government stakeholders to strengthen operations.

The role requires responding to APT/FIN actor incidents, cloud-based threats, and producing detailed, actionable reports. A Public Trust eligibility is required for this position.

Qualifications

• 5+ years of incident response experience.
• Experience handling and responding to APT or FIN actor incidents.
• Experience responding to cloud-based threats in an IR capacity.
• Experience working directly with clients in a professional environment.
• Hands-on experience with Microsoft Defender EDR.
• Knowledge of SOC best practices.
• Ability to recommend and implement process improvements.
• Strong written and verbal communication skills.
• Ability to author clear and robust cybersecurity reports.
• Bachelor's degree.
• Senior-level Incident Response certification.
• Ability to obtain and maintain a Public Trust.

Responsibilities

• Respond to and investigate cybersecurity incidents across enterprise environments.
• Analyze security events and indicators of compromise associated with APT and FIN actors.
• Investigate and respond to cloud-based threats and security incidents.
• Utilize Microsoft Defender EDR and other security tools to identify and contain threats.
• Develop incident response reports, findings, and recommendations.
• Support continuous improvement of incident response processes and procedures.
• Collaborate with government personnel and auditors to resolve security concerns and improve operational effectiveness.
• Review and provide quality assurance for team deliverables and incident reports.
• Assist with security operations center (SOC) initiatives and best practice implementation.

Skills

Incident response

APTs/FIN actors

Cloud-based threats

Client interaction

Microsoft Defender EDR

SOC best practices

Process improvement

Communication skills

Reporting

Public Trust

Education

Bachelor's degree

Senior-level Incident Response certification

Tools

Splunk

GitHub

Archer

Job description

Description

MBL Technologies, Inc. offers a diverse set of management and technology consulting services to Federal government and commercial markets. Our solutions are tailored to support each client’s mission, accounting for their unique needs and operating environments to ensure success. We bring the right people, capabilities, and expertise together to assist our clients with enabling their mission. Together our individual differences drive successful business results.

If you are transitioning from military to civilian life, have prior service, are a retired veteran, or a member of the National Guard or Reserves, or spouse of an active military service member, we encourage you to apply. Please visit our webpage for information on our policies and benefits for the military and veteran community.

Why Work with Us?

• Make an Impact: Work on meaningful projects that support critical missions and drive innovation.
• Invest in Your Future: Competitive benefits, 401(k) match, and professional development opportunities.
• Be Part of Something Bigger: Join a collaborative team that values community engagement, volunteerism, and employee connection.

MBL Technologies is seeking an experienced Incident Response Analyst, Senior to support cybersecurity incident response operations for a federal government customer. The successful candidate will help identify, investigate, contain, and remediate cybersecurity incidents while working closely with government stakeholders to improve overall security operations and incident response processes.
This position requires experience responding to Advanced Persistent Threats (APTs), financial threat actors, and cloud-based security incidents. The ideal candidate will possess strong analytical, technical, and communication skills with the ability to produce detailed and actionable cybersecurity reports.
This role supports a federal customer and requires the ability to obtain and maintain a Public Trust.

Key Responsibilities:

• Respond to and investigate cybersecurity incidents across enterprise environments.
• Analyze security events and indicators of compromise associated with APT and FIN actors.
• Investigate and respond to cloud-based threats and security incidents.
• Utilize Microsoft Defender EDR and other security tools to identify and contain threats.
• Develop incident response reports, findings, and recommendations.
• Support continuous improvement of incident response processes and procedures.
• Collaborate with government personnel and auditors to resolve security concerns and improve operational effectiveness.
• Review and provide quality assurance for team deliverables and incident reports.
• Assist with security operations center (SOC) initiatives and best practice implementation.

Required Experience Skills & Qualifications:

• 5+ years of experience performing incident response activities.
• Experience handling and responding to APT or FIN actor incidents.
• Experience responding to cloud-based threats in an incident response capacity.
• Experience working directly with clients in a professional environment.
• Hands-on experience with Microsoft Defender EDR.
• Knowledge of SOC best practices.
• Ability to recommend and implement process improvements.
• Strong written and verbal communication skills.
• Ability to author clear and robust cybersecurity reports.
• Bachelor's degree.
• Senior-level Incident Response certification.
• Ability to obtain and maintain a Public Trust.

Preferred Qualifications:

• Experience with Splunk.
• Experience with GitHub.
• Experience with Archer.
• Experience mentoring junior analysts and reviewing team deliverables.

MILITARY OCCUPATIONAL SPECIALTY CODES (MOS codes):

170A, 170D, 17A, 17B, 17C, 17D, 24B, 25B, 47D, 94F, IT, 17 5309, 6203, 9735, 9740, 9890, 9891

COORPORATE CITIZEN:

MBL Technologies’ vision is to make a positive difference – for our people, our customers, and our communities. As such, a commitment to service and excellence has been woven into the very fabric of our culture. MBL employees demonstrate a willingness to consistently go above and beyond and strive for excellence in all we do – championing, protecting, and celebrating the core business through the mission, vision, and values. All are expected to be good corporate citizens, supporting one another and internal corporate initiatives to build a stable business platform and ensure lasting company success.

Benefits:

MBL Technologies offers a competitive salary adjusted for candidate qualifications partnered with an industry-leading benefits package. This package includes incentive plans with corporate and individual-based performance bonuses, 401K, PTO, remote work, health and wellness programs, employee discounts, and learning and development reimbursement.

EEO STATEMENT:

MBL Technologies is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, sexual orientation, gender identity, disability, or protected veteran status.