Cybersecurity Incident Handler

Position Overview

Cybersecurity Incident Handler – As a security operations center analyst, you're in the middle of the action, responding to and mitigating threats in real time. In this role, you are the first line of cyber defense, tasked with securing critical infrastructure from cyber-attacks. You'll monitor threats using state-of-the-art tools, analyze incidents to determine impacts, and collaborate closely with your team to restore operations and improve security measures.

Key Responsibilities

• Monitor and analyze cybersecurity threats using advanced tools.
• Respond to, mitigate, and document cybersecurity incidents in real time.
• Analyze incidents to assess impacted systems and assist in recovery efforts.
• Combine threat intelligence with event data to identify attacker patterns and goals.
• Collaborate with team members to implement industry best practices and security measures.

Required Qualifications

• Experience in cybersecurity and in a security operations center, including incident response activities (artifact analysis, incident report writing, event triage).
• Knowledge of cyber threat intelligence, digital forensics, red teaming, threat hunt, cloud incident response, counterintelligence, and detection engineering.
• Familiarity with cybersecurity standards and the implementation of industry best practices, including external standards like ISO 22301, ISO 22317, and NIST guidelines (NIST 800-53 or NIST 800-61).
• Ability to work a rotating shift schedule supporting a 24/7 environment.
• TS/SCI clearance is required.
• Minimum education: HS diploma or GED with DoD 8140 Baseline Level II Certification.

Preferred Qualifications

• Experience with Microsoft Office products and various cybersecurity tools such as Microsoft Defender, Splunk, and advanced threat detection systems.
• Familiarity with Cloud and DevSecOps environments, including cloud native technologies across platforms like AWS, Azure, and Google Cloud.
• Background in digital forensics, continuous monitoring, and incident response within complex IT environments.

Benefits & Perks

• Comprehensive benefits including health, life, disability, financial, and retirement options.
• Paid leave, professional development, tuition assistance and work-life balance programs.
• Competitive compensation range: $69,400.00 to $158,000.00 (annualized USD), reflecting various factors such as location, experience, and skill set.
• A people-first work model offering flexibility through remote, hybrid, or onsite opportunities.