Senior Cyber Threat Incident Response Analyst - Remote

Amtrak; Washington (District of Columbia); Hybrid; USD 125,000 - 161,000; Full time

Benefits offered by this job

Health and Wellbeing

Financial and Retirement

Work and Family Life Support

Health Insurance

Dental Insurance

Vision Insurance

401K with Employer Match

Generous PTO

Wellness Programs

Railroad Retirement Benefits

Paid Caregiving Days

Health Savings Account

Student Loan Assistance

Tuition and Education Reimbursement

Paid Family Leave

Life Insurance

Rail Pass Privileges

Disability Insurance

Employee Assistance Program

Commuter Benefits

Job summary

Amtrak seeks a Principal Cyber Threat Incident Response Analyst to join the Cyber Fusion Center. You will coordinate and execute incident response activities across the organization, lead complex investigations, and ensure timely resolution of cybersecurity incidents with IT, OT, and cross-functional teams.

You will develop playbooks and runbooks, participate in exercises, and work closely with information security leadership and business stakeholders to reduce risk and protect critical

Qualifications

• Bachelor’s Degree in Computer Science, Information Systems, Cybersecurity, or related technical field, or equivalent combination of education, training and/or 7–10 years relevant experience.
• Basic knowledge of privacy, data protection, and compliance requirements related to incident response and breach notification preferred.
• Hands-on experience with forensics tools and log correlation; ability to think like an attacker and hunt within security tool stack.

Responsibilities

• Provide industry-leading cyber incident response supporting the Cyber Fusion Center mission.
• Resolve security incidents quickly, effectively and at scale with complete incident response including investigation, containment and remediation.
• Conduct digital forensic and incident response analysis with support from threat hunting and malware triage analysts.
• Build scripts, tools, or methodologies to enhance Amtrak’s incident investigation processes.
• Support Crisis Management, Emergency Management, Incident Response, Legal and OIG teams to coordinate Cyber Incident Response Activities.

Skills

Bachelor’s Degree in CS/IS/Cybersec

Education

Bachelor’s Degree in Computer Science, Information Systems, Cybersecurity or related field

Job description

Amtrak seeks a Principal Cyber Threat Incident Response Analyst to join the Cyber Fusion Center. You will coordinate and execute incident response activities across the organization, lead complex investigations, and ensure timely resolution of cybersecurity incidents with IT, OT, and cross-functional teams.

You will develop playbooks and runbooks, participate in exercises, and work closely with information security leadership and business stakeholders to reduce risk and protect critical