Onsite Cyber Incident Response Analyst - Secret Clearance

Cybersecurity Jobs; Washington (District of Columbia); On-site; USD 87,000 - 198,000; Full time

Benefits offered by this job

Health, life, disability, financial, &

Retirement benefits

Paid leave

Professional development

Tuition assistance

Work-life programs

Dependent care

Recognition awards program

Job summary

Booz Allen Hamilton in Washington, DC seeks an on-site Cybersecurity Incident Response Analyst to monitor, analyze, detect, and respond to cyber events across information systems. The role emphasizes high-impact incident handling, triage of network and host data, strict chain-of-custody, and close collaboration with security teams to strengthen SOC operations and client defense.

Applicants must have a Secret clearance and a Bachelor's degree, with professional certifications such as OSCP or GCIH

Qualifications

• 5+ years of experience in cybersecurity or information technology disciplines.
• 3+ years in APT hunting, penetration testing, digital forensics, malware reverse engineering, SOC operations, or incident response.
• Experience with incident response tools including SentinelOne, Splunk, or Microsoft Defender.
• Ability to adapt communication style and messaging for professionals at all leadership levels.
• Secret clearance.
• Bachelor’s degree.
• One or more certifications: OSCP, CCNA-Security, CySA+, GCIH, GICSP, or PenTest+.

Responsibilities

• Apply expertise in monitoring, analyzing, detecting, and responding to cyber events and incidents across information systems and networks.
• Support integrated, dynamic cyber defense by leveraging cybersecurity solutions to deliver operational services such as intrusion detection and prevention, situational awareness of network intrusions, security event and data spillage response actions, and incident response operations.
• Contribute to developing innovative ideas and principles for unusually complex problems, providing highly creative solutions.
• Lead and coordinate response activities for major, high-impact incidents by generating clear, concise recommendations and facilitating professional communications across stakeholders.
• Collaborate with security teams to develop, tune, automate, and enhance network and host-based security devices, and support SOC operations for client cyber intrusions.
• Perform extensive network and host triage, maintain strict chain-of-custody, analyze documentation and reports, and carry out remediation as required.

Skills

Cybersecurity

Incident response

Threat hunting

Communication

Clearance

Education

Bachelor's degree

Tools

SentinelOne

Splunk

Microsoft Defender

Job description

Booz Allen Hamilton in Washington, DC seeks an on-site Cybersecurity Incident Response Analyst to monitor, analyze, detect, and respond to cyber events across information systems. The role emphasizes high-impact incident handling, triage of network and host data, strict chain-of-custody, and close collaboration with security teams to strengthen SOC operations and client defense.

Applicants must have a Secret clearance and a Bachelor's degree, with professional certifications such as OSCP or GCIH