Senior Cyber Incident Response Analyst

VulnU; Washington, Huntsville, Houston (District of Columbia, AL, TX); Hybrid; USD 87,000 - 198,000; Full time

Benefits offered by this job

Learning budget

Tuition assistance

Job summary

Booz Allen Hamilton is seeking a Cybersecurity Incident Response Analyst to apply expertise in monitoring, analyzing, detecting, and responding to cyber events across information systems and networks.

You will contribute to a dynamic cyber defense, support the SOC, and work on high-impact incidents, coordinating communications with stakeholders and enhancing security devices and processes. A TS/SCI clearance and relevant certifications are preferred.

Qualifications

• 5 years of experience in cybersecurity or information technology disciplines.
• 3 years of experience with Advanced Persistent Threat (APT) hunting, penetration testing, digital forensics, malware reverse engineering, SOC operations, or incident response.
• Experience with Incident Response tools such as SentinelOne, Splunk, or Microsoft Defender.
• Ability to adapt communications styles and messaging for professionals at all levels of leadership.
• Secret clearance (or eligibility).
• Bachelor's degree in a relevant field.

Responsibilities

• Apply monitoring, analyzing, detecting, and responding to cyber events and incidents in information systems and networks.
• Contribute to an integrated, dynamic cyber defense and leverage cybersecurity solutions for operational services including intrusion detection and incident response actions.
• Work with security teams to develop, tune, automate, and enhance network and host-based security devices and support the SOC in responding to client intrusions.
• Perform extensive network and host triage, maintain chain-of-custody, and analyze documentation and reports.

Skills

Incident response

Threat hunting

SOC operations

Digital forensics

Malware analysis

Education

Bachelor's degree

Tools

SentinelOne

Splunk

Microsoft Defender

Job description

Booz Allen Hamilton is seeking a Cybersecurity Incident Response Analyst to apply expertise in monitoring, analyzing, detecting, and responding to cyber events across information systems and networks.

You will contribute to a dynamic cyber defense, support the SOC, and work on high-impact incidents, coordinating communications with stakeholders and enhancing security devices and processes. A TS/SCI clearance and relevant certifications are preferred.