Night-Shift Incident Response Analyst

Federal Reserve Bank of New York; Richmond, Northern (VA, KY); Hybrid; USD 95,000 - 130,000; Full time

Benefits offered by this job

Remote work option within commutable距离

Job summary

Federal Reserve Bank of Richmond is seeking an Incident Response Analyst to triage and respond to security events within the Federal Reserve System. You will analyze data from diverse sources, perform forensics, and support incident handling across the life cycle.

The role requires a Bachelor’s degree or equivalent experience with 3+ years in information security, familiarity with SIEM/SOAR, and knowledge of adversary TTPs. Strong communication and collaboration with stakeholders are essential.

Qualifications

• Bachelor's Degree or equivalent experience with 3+ years of relevant work experience.
• Experience with SIEM/SOAR platforms to analyze security events from multiple sources.
• Knowledge of incident response methodologies.
• Knowledge of adversary tactics, techniques, and procedures (TTPs).
• Ability to communicate complex information clearly in verbal and written form.
• Collaborative mindset to work with analysts and stakeholders.

Responsibilities

• Perform security event triage and analysis.
• Analyze large volumes of security data from multiple sources.
• Conduct network forensics and postmortem traffic analysis.
• Respond to DDoS, malware, phishing, and data exfiltration events.
• Develop scripts/tools to improve detection/response.
• Interface with NIRT customers and stakeholders.

Skills

SIEM/SOAR analysis

Incident response

Network forensics

Threat intelligence

Communication skills

Education

Bachelor's Degree or equivalent experience

Tools

SIEM tools

Logging sources

Job description

Federal Reserve Bank of Richmond is seeking an Incident Response Analyst to triage and respond to security events within the Federal Reserve System. You will analyze data from diverse sources, perform forensics, and support incident handling across the life cycle.

The role requires a Bachelor’s degree or equivalent experience with 3+ years in information security, familiarity with SIEM/SOAR, and knowledge of adversary TTPs. Strong communication and collaboration with stakeholders are essential.