Incident Response Analyst (Remote - US only)

S. government missions and requires a Public Trust or Suitability/Fitness determination). A mission-focused defense and civilian government contractor is hiring an Incident Response Analyst to lead investigations of cybersecurity incidents affecting client systems, networks, and data. You will work with a high degree of independence on moderately complex security challenges, performing root cause analysis and recommending controls to prevent repeat incidents. The role combines hands-on response work with direct client engagement and process improvement for government stakeholders.

What you'll do

• Monitor and triage security alerts, then investigate potential threats, including forensic analysis
• Lead containment, eradication, and recovery activities to limit the impact of breaches
• Perform root cause analysis and post-incident reviews, and document findings in clear reports
• Work with security teams, IT staff, auditors, and government personnel to improve incident response processes and resolve identified issues
• Conduct threat analysis and vulnerability assessments to strengthen the overall security posture
• Review submissions from team members for quality and provide feedback

What you need

• Bachelor's degree with at least 5 years of hands-on incident response experience
• Experience responding to APT or FIN actors and to cloud-based threats in an incident response role
• Working knowledge of Microsoft Defender EDR and SOC best practices
• Professional experience working directly with clients
• Ability to write clear, thorough reports and perform QA on team output
• Ability to obtain and maintain a Public Trust or Suitability/Fitness determination based on client requirements
• Preferred: experience with Splunk, GitHub, or Archer, and experience reviewing junior analysts' work

Applicants must be based in: United States.

How to apply

Get the free i'llTip app to see the employer's details and apply. i'llTip's AI can tailor your résumé to this job, and you'll get alerts for similar roles.

Prefer the website? Continue on illtip.comOr get the app: Android · iPhone

🔔 Get new jobs like this first: join i'llTip Jobs on Telegram · or get personal job alerts