Remote Cybersecurity Incident Response Analyst

Booz Allen; Washington (District of Columbia); Hybrid; USD 87,000 - 198,000; Full time

Job summary

Booz Allen is seeking a Cybersecurity Incident Response Analyst in Washington, DC to monitor, analyze, detect, and respond to cyber events across information systems and networks. You will support the SOC, triage incidents, and coordinate remediation with stakeholders, while crafting clear recommendations.

Ideal candidates have 5+ years in cybersecurity, 3+ years in IR/SOC-related work, and possess relevant certifications with a active clearance.

Qualifications

• 5+ years of experience in cybersecurity or information technology disciplines.
• 3+ years of experience with APT hunting, penetration testing, digital forensics, malware reverse engineering, SOC operations, or incident response.
• Experience with Incident Response tools such as SentinelOne, Splunk, or Microsoft Defender.
• Ability to adapt communications styles and messaging for professionals at all levels of leadership.
• Secret clearance; security investigations may be required; a qualifying background is essential.
• Bachelor's degree and relevant certifications (OSCP, CCNA-Security, CySA+, GCIH, GICSP, PenTest+).

Responsibilities

• Apply monitoring and response to cyber events in information systems and networks.
• Support SOC operations; triage and coordinate remediation across stakeholders.
• Develop and tune security devices; analyze incidents and generate concise recommendations.
• Maintain chain-of-custody and document incident handling activities.
• Collaborate with threat intelligence and security teams to improve defense.

Skills

Cybersecurity experience

APt hunting/SOC/IR

Incident Response tools

Communication skills

Security clearance

Education

Bachelor's degree

Industry certifications (OSCP/CCNA-Security/CySA+/GCIH/GICSP/PenTest+)

Tools

SentinelOne

Splunk

Microsoft Defender

Job description

Booz Allen is seeking a Cybersecurity Incident Response Analyst in Washington, DC to monitor, analyze, detect, and respond to cyber events across information systems and networks. You will support the SOC, triage incidents, and coordinate remediation with stakeholders, while crafting clear recommendations.

Ideal candidates have 5+ years in cybersecurity, 3+ years in IR/SOC-related work, and possess relevant certifications with a active clearance.