Incident Response Team Analyst

KellyMitchell Group; Arlington Heights (IL); On-site; USD 44,000 - 63,000; Full time

Benefits offered by this job

ESOP

401K offered

Job summary

KellyMitchell is seeking an Incident Response Team Analyst to join a 24x7 Cyber Defense operation in Arlington Heights, IL. This 6‑month to 1‑year contract requires hands‑on IR work with CrowdStrike and Splunk, including malware analysis and forensics, with a focus on containment and recovery.

The role demands a 3+ year SOC/IR background, a CS/Cybersecurity degree or equivalent, and willingness to work nights/weekends in a dynamic, fast-paced environment.

Qualifications

• Bachelor's degree in CS/Cybersecurity or equivalent experience.
• 3+ years of experience as a SOC or Incident Response Analyst.
• Hands-on experience with CrowdStrike and Splunk.
• Experience triaging alerts and assessing severity.
• Knowledge of NIST or ISO 27001.
• Willing to work 24x7 shifts including nights/weekends.
• Located in the Chicago area or willing to relocate.

Responsibilities

• Monitor and triage security alerts and logs in Splunk and CrowdStrike.
• Investigate incidents, assess severity, and initiate IR process.
• Conduct malware analysis, network traffic analysis, and endpoint forensics.
• Assist with containment, eradication, and recovery with internal teams.
• Maintain detailed incident records and write incident reports.
• Prepare incident reports with recommendations to improve security posture.
• Share threat intelligence with cross-functional teams.
• Stay current on cybersecurity threats, trends, and best practices.

Skills

SOC experience

Incident response

Malware analysis

Endpoint forensics

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

CrowdStrike

Splunk

Job description

Our client, a major U.S. airline, is looking for an Incident Response Team Analyst to join their Cyber Defense team supporting a 24x7 security operation. It’s a 6 month to 1 year contract with potential to extend or convert, based in Arlington Heights, IL, and the role requires working assigned shifts outside normal business hours, including nights and weekends. This person will monitor and triage security alerts and logs, investigate incidents, including malware analysis, network traffic analysis, and endpoint forensics, and help work incidents through containment, eradication, and recovery with internal teams. They’ll also maintain detailed incident records and write incident reports for management. We’re looking for someone who has hands‑on experience investigating security incidents in CrowdStrike and Splunk, not just monitoring dashboards and escalating tickets, which is the key differentiator for this role. Experience limited to GRC, compliance, audit, or vulnerability management is not a fit.

This position is W-2 only. We do not work with third‑party firms or C2C arrangements for this role.

Core Responsibilities

• Monitor and triage security alerts and logs in Splunk and CrowdStrike
• Investigate security alerts, assess severity, and initiate the incident response process
• Conduct malware analysis, network traffic analysis, and endpoint forensics
• Assist with containment, eradication, and recovery, coordinating with internal teams
• Maintain detailed incident records, including timelines, actions taken, and lessons learned
• Prepare incident reports for management with recommendations to improve security posture
• Share threat intelligence with cross‑functional teams
• Stay current on cybersecurity threats, trends, and best practices

Required Skills/Experience (Must-Haves)

• Bachelor’s degree in Computer Science, Cybersecurity, or related field, or equivalent experience
• 3+ years of experience as a SOC or Incident Response Analyst
• Hands‑on experience investigating security alerts and incidents in CrowdStrike
• Hands‑on experience investigating alerts and logs in Splunk, including writing searches
• Experience triaging alerts and assessing severity
• Exposure to malware analysis, network traffic analysis, or endpoint forensics
• Experience documenting incidents and writing incident reports
• Knowledge of security frameworks such as NIST or ISO 27001
• Able to work assigned shifts in a 24x7 operation, including nights and weekends
• Located in the Chicago area or willing to relocate

Preferred Skills/Experience (Nice-to-Haves)

• SOC or incident response experience at Discover Financial Services or Capital One
• SOC experience in a large financial services or enterprise environment
• Certifications such as GCIH, GCIA, GCFE, GCFA, or CompTIA Security+
• Tier 2 SOC or incident response experience
• Experience writing or using SOC playbooks and procedures
• Threat hunting experience
• Hands‑on investigator who digs into alerts rather than just escalating them
• Stays calm and organized when handling multiple alerts and incidents under pressure
• Communicates clearly in writing and verbally with team members and management
• Fast learner who asks questions when in doubt
• Naturally organized and able to manage multiple priorities
• Adapts well to changing priorities in a fast‑paced environment
• Location: Arlington Heights, IL
• Supports a 24x7 operation with assigned shifts outside normal business hours
• Contract length: 6 months to 1 year, with potential to extend or convert
• Pay Range: The approximate pay range for this position is between $32.00 and $46.00 per hour. Please note that the pay range provided is a good faith estimate. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums.
• Employee‑Owned Profit Sharing (ESOP)
• 401K offered

About KellyMitchell

At KellyMitchell, our culture is world class. We’re movers and shakers! We don’t mind a bit of friendly competition, and we reward hard work with unlimited potential for growth. This is an exciting opportunity to join a company known for innovative solutions and unsurpassed customer service. We're passionate about helping companies solve their biggest IT staffing & project solutions challenges. As an employee‑owned, women‑led organization serving Fortune 500 companies nationwide, we deliver expert service at a moment's notice.

Marketing Disclosure

By applying for this job, you agree to receive calls, AI‑generated calls, text messages, or emails from KellyMitchell and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at https://www.careers.kellymitchell.com/privacy-policy