Lead Cybersecurity Incident Response Analyst (TS/SCI)

Si Tec Consulting; Springfield (VA); Presencial; USD 130 000 - 170 000; Tempo integral

Resumo da oferta

Si Tec Consulting is seeking a Cybersecurity Operations Analyst Tier 3 in Springfield, VA. This senior role focuses on containment, eradication, and recovery during complex incidents, with forensics, malware analysis, and threat attribution.

You will build incident timelines, reports, and recommendations. Active TS/SCI clearance with polygraph eligibility is required, plus a DoD 8140/8570 IAT II and CSSP Incident Responder certification or ability to obtain it.

Qualificações

• Bachelor's degree or 6+ years cybersecurity experience.
• Active TS/SCI clearance with the ability to obtain a polygraph.
• DoD 8140/8570 IAT II and CSSP Incident Responder compliant certification, or the ability to meet the required certification timeline.
• Experience with incident response, digital forensics, malware analysis, and defensive cyber operations.
• Strong technical writing and communication skills.

Responsabilidades

• Lead technical analysis and response actions during cybersecurity incidents.
• Perform host, server, network, memory, and forensic artifact analysis.
• Analyze malware, develop signatures, and identify indicators of compromise.
• Build incident timelines, reports, briefings, and corrective-action recommendations.
• Develop and use approved scripts and tools to collect and analyze data.
• Coordinate with cybersecurity, counterintelligence, and law-enforcement stakeholders as required.
• Review incident tickets for accuracy, documentation, and response quality.
• Participate in exercises and readiness activities when not responding to active incidents.

Conhecimentos

Incident response

Digital forensics

Malware analysis

Technical writing

Strong communication

Formação académica

Bachelor's degree or 6+ years cybersecurity experience

Descrição da oferta de emprego

Si Tec Consulting is seeking a Cybersecurity Operations Analyst Tier 3 in Springfield, VA. This senior role focuses on containment, eradication, and recovery during complex incidents, with forensics, malware analysis, and threat attribution.

You will build incident timelines, reports, and recommendations. Active TS/SCI clearance with polygraph eligibility is required, plus a DoD 8140/8570 IAT II and CSSP Incident Responder certification or ability to obtain it.