CSIRT Analyst

Evolver Federal•Kiln, MS

3d•Onsite

About The Position

Evolver is seeking a CSIRT Analyst to join their team supporting a federal customer located at Stennis Space Center, MS. The CSIRT is the primary entity of the SOC and the heart of Incident Response Operations. They are responsible for monitoring, incident recording, and reporting of cyber security events or incidents. The goal of CSIRT is to minimize and control the damage resulting from cybersecurity events or incidents, provide effective guidance for response, coordinate recovery activities, and work to prevent future incidents from occurring. Additionally, they provide coverage to ensure a proactive approach to defending against email attacks and a reactive approach when responding to successful attacks.

Requirements

Must be a US Citizen able to obtain an Agency-specific clearance prior to starting
Must also be able to obtain a DoD Top Secret Clearance (this can be done while working on the program)
Must have at least one active certification to include: Security+CE, ISC2 CISSP or other comparable certification approved on a case by case basis
Bachelor's Degree and a minimum of 1 year of applicable experience is required. 4 years of additional applicable experience may substitute for a degree.

Nice To Haves

Familiarity with security technologies and tools, including SIEM platforms, intrusion detection/prevention systems, and endpoint security solutions
Strong analytical and problem-solving skills, with the ability to analyze and interpret security event data.
Excellent communication and interpersonal skills, with the ability to effectively communicate technical information to non-technical stakeholders.
Ability to work effectively in a fast-paced environment, managing multiple priorities and deadlines.
Current Active DOD Top Secret Clearance

Responsibilities

Monitor security alerts and events to identify potential cyber security incidents.
Conduct initial triage and analysis of security events to determine their severity and potential impact.
Investigate and respond to security incidents in accordance with established procedures and protocols.
Collaborate with cross-functional teams to contain and remediate security incidents, minimizing their impact on operations.
Document incident details, including analysis findings, actions taken, and recommendations for improvement.
Provide timely updates and reports on incident status to stakeholders, including management and technical teams.
Participate in incident response exercises and tabletop exercises to enhance preparedness and response capabilities.
Stay abreast of emerging threats and vulnerabilities, sharing insights and recommendations with the broader team.
Continuously improve incident detection and response processes through automation, tooling, and knowledge sharing.