Junior Cybersecurity Incident Response Triage Analyst

Accenture Federal Services Careers Marketplace; Arlington (VA); On-site; USD 60,000 - 90,000; Full time

Job summary

Accenture Federal Services in Arlington, VA, seeks a Cybersecurity Incident Response Triage Analyst to join the CIRT team within the CISO organization. The role involves monitoring, triaging, and analyzing alerts from SIEM and security sensors, coordinating with incident response and operations teams to qualify events and determine false positives.

Candidates should have 1–2 years in information security, experience with event/log analysis and SIEM, and strong communication skills.

Qualifications

• 1-2 years of information security experience or equivalent education/work experience.
• Experience performing event and log analysis with security tools including SIEM.
• Familiarity with TCP/IP, malware analysis concepts, and endpoint analysis.
• Strong written and verbal communication skills and attention to detail.
• Understanding of incident response lifecycles and security operations.

Responsibilities

• Actively monitor and respond to cybersecurity incidents related to alerted policy violations.
• Analyze and investigate incidents to determine nature and scope.
• Coordinate with team leads for effective incident resolution.
• Document incidents and response activities in detail.
• Stay updated with latest cybersecurity threats and trends.
• Assist in developing incident response strategies and procedures.
• Collaborate with operations, legal, HR, and management to interview subjects and determine true/false positives.

Skills

Incident response

Event and log analysis

Communication skills

Network security basics

Tools

SIEM

Firewalls

Antivirus

Web proxies

DLP tools

NIDS/IPS

Job description

Accenture Federal Services in Arlington, VA, seeks a Cybersecurity Incident Response Triage Analyst to join the CIRT team within the CISO organization. The role involves monitoring, triaging, and analyzing alerts from SIEM and security sensors, coordinating with incident response and operations teams to qualify events and determine false positives.

Candidates should have 1–2 years in information security, experience with event/log analysis and SIEM, and strong communication skills.