Tier 2 Incident Response Analyst - Washington DC

VetJobs

Washington (District of Columbia)

Hybrid

USD 110,000 - 120,000

Full time

40 hours ago

Be an early applicant

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Quantum Sky is seeking a Tier 2 Incident Response Analyst to support a law enforcement customer in Washington, DC. You will monitor tools, triage alerts, investigate cyber threats, and act as the initial contact for incidents within a SOC team.

The role offers learning opportunities and cross-training to grow cybersecurity skills. You will work onsite with hybrid flexibility, grow your expertise in incident response techniques, and contribute to threat hunting and intelligence efforts while

Qualifications

Six years of cybersecurity experience with at least three in a SOC/IR role.
Bachelor’s degree in Cybersecurity or related field.
CISSP or CEH certification; substitutions may be allowed at the client's discretion.
Experience with SIEM and cloud service offerings.

Responsibilities

Monitor security alerts using security tools and triage incidents.
Investigate high-priority cybersecurity incidents and perform root-cause analysis.
Document triage findings in the Incident Management System (IMS).
Collaborate with threat hunting and threat intelligence teams.
Mentor Tier 1 SOC Analysts to enhance their skills.

Skills

Cybersecurity expertise

SIEM experience

Cloud services knowledge

Windows & Unix

Technical writing

Customer-facing skills

Education

Bachelor's or higher in Cybersecurity

Tools

SIEM (Sumo Logic/Splunk)

Regex & scripting basics

Threat intelligence tools

Job description

Job Description

ATTENTION MILITARY AFFILIATED JOB SEEKERS - Our organization works with partner companies to source qualified talent for their open roles. The following position is available to Veterans, Transitioning Military, National Guard and Reserve Members, Military Spouses, Wounded Warriors, and their Caregivers . If you have the required skill set, education requirements, and experience, All positions are onsite, unless otherwise stated.

Description

Quantum Sky is searching for a Tier 2 Incident Response Analyst (IR) to support a law enforcement customer in Washington, DC. Our IR analysts form the backbone of our cybersecurity services. You will play a critical role in securing our customers by monitoring our tools, triaging alerts, and investigating potential cyber threats. As a SOC team member, you will also serve as the initial point of contact for cybersecurity incidents, ensuring prompt and effective responses. We provide a supportive environment for you to learn from senior SOC team members, cross-train for other positions, and attend external training. We want to see you grow and improve your cybersecurity skills. Join us and delve into the complexities of monitoring enterprise networks, learn basic incident response techniques, and how to effectively investigate phishing threats against our clients.

Responsibilities

Utilize security tools to analyze, investigate, and triage security alerts
Monitor our customers environments, including cloud and SaaS solutions for evidence of adversarial activity
Perform in-depth analysis and investigation of high-priority cybersecurity incidents
Utilize advanced tools, such as host based digital forensics or malware analysis capabilities, to identify incidents’ root causes, scope, and impact
Collaborate with cyber threat hunting and cyber threat intelligence teams
Participate in the development, implementation, and tuning of the SOC tools detection content and alerting signatures.
Accurately document triage findings, and intake reports of external cybersecurity events from SOC customers via phone or email in the SOCs Incident Management System(IMS)
Learn new open and closed-source investigative techniques
Perform research into emerging threats and vulnerabilities to aid their prevention and mitigation
Help shape the evolution of processes and procedures of the SOC
Provide guidance and mentorship to Tier 1 SOC Analysts to enhance their skills and capabilities

Minimum Education Required

Bachelors

Qualifications - Required

Minimum of six (6) years of cybersecurity experience with at least three (4) years in a SOC watch floor analyst or IR role
Bachelor’s Degree or higher in Cybersecurity or related is required
CISSP or CEH certification; additional experience, formal training, certifications, and/or education may be substitutable at the client's discretion
Experience in some of the following tools and technologies :i.e. SIEM experience required with Sumo Logic/Splunk preferred.
Knowledge of common attacker tools, techniques and procedures (TTP)
Experience with major cloud service provider offerings
Knowledge of malware
Knowledge of enterprise architecture including zero trust principles
Knowledge of Windows and Unix operating systems
Knowledge of common phishing techniques and how to investigate them
Proficiency in technical writing
Able to accurately and succinctly convey information through speaking, email, and presentations
Comfortable in customer facing environments
Ability to maintain a positive customer service mentality

Qualifications - Desired

Previous SOC or incident response experience
Working knowledge of regex and scripting languages
Any SOC analyst relevant certifications such as those from GIAC or CompTIA
The initiative to ask for assistance and offer fresh ideas to improve the SOC’s performance

Clearance

TS/SCI Clearance required

Location

This hybrid role is expected to be on the client site at least 2 days per week.

Compensation

Compensation is unique to each candidate and relative to the skills and experience they bring to the position. The salary range for this position is typically between $110,000-$120,000. This does not guarantee a specific salary as compensation is based upon multiple factors such as education, experience, certifications, and other requirements, and may fall outside of the above-stated range.

Certificates/Security Clearances/Other - Required