Senior Cyber Incident Response Analyst

Jobtailor; California (MO); On-site; USD 110,000 - 150,000; Full time

Job summary

Jobtailor seeks a senior cybersecurity incident responder to lead containment, eradication and recovery for government networks, including NIPRNet and SIPRNet. You will analyze SIEM data, coordinate with SOC analysts and system owners, document investigations, and preserve evidence to support post-incident lessons learned.

U.S. citizenship and an active Secret security clearance are required; DoD or Federal experience is preferred.

Qualifications

• Bachelor’s degree and 5+ years of relevant cybersecurity experience; degree may be substituted by specific training
• Experience supporting cybersecurity incident response, SOC operations, cyber defense, or security-event investigation
• Experience analyzing cybersecurity events and determining response or escalation actions
• Experience supporting containment, eradication, recovery, and post-incident activities
• Experience monitoring and analyzing enterprise cybersecurity tools and telemetry
• Experience documenting incident timelines, evidence, response actions, and status
• Experience coordinating cybersecurity incidents across technical teams and stakeholders
• U.S. Citizenship required; active Secret security clearance required

Responsibilities

• Support preparation, detection, analysis, containment, eradication, recovery, and post-incident activities for cybersecurity events
• Investigate cybersecurity incidents affecting NIPRNet and SIPRNet environments
• Perform proactive security monitoring and analysis to identify intrusion attempts and threats
• Analyze security information from SIEM platforms, endpoint tools, firewalls, IDS/IPS, web security, antispam, and malware systems
• Assess events to determine scope, impact, and required response actions
• Coordinate eradication and recovery activities with system owners, administrators, and security teams
• Collect and preserve technical evidence and maintain incident records and timelines
• Coordinate incident-response activities with SOC analysts, system owners, and stakeholders
• Support escalation and after-hours response per procedures
• Provide timely status updates during investigations and contribute to post-incident lessons learned

Skills

Cybersecurity Incident Response

SOC Operations

SIEM Analysis

Incident Documentation

Network & Endpoint Security Monitoring

Education

Bachelor's degree

Active Secret Security Clearance

Tools

SIEM Platforms

Endpoint Security Tools

Firewalls

Intrusion Detection Systems

Intrusion Prevention Systems

Web-Security Systems

Antispam Technologies

Malware-Prevention Systems

Job description

Jobtailor seeks a senior cybersecurity incident responder to lead containment, eradication and recovery for government networks, including NIPRNet and SIPRNet. You will analyze SIEM data, coordinate with SOC analysts and system owners, document investigations, and preserve evidence to support post-incident lessons learned.

U.S. citizenship and an active Secret security clearance are required; DoD or Federal experience is preferred.