CSIRT Lead (Data Analyst IV)

Aretec • Kiln, MS

49d • Onsite

About The Position

At Aretec, Inc., we are catalysts for change within the federal government landscape. Specializing in advanced analytics, machine learning, data analysis, cybersecurity, and business optimization, we empower federal agencies to achieve their most critical missions. As a premier partner and prime vendor, we deliver innovative, high-impact solutions that address complex challenges and drive national progress. Our commitment to excellence and innovation positions us at the forefront of transforming governmental operations, enhancing efficiency, and making a lasting difference in the lives of citizens. You are a decisive and experienced cybersecurity professional who thrives in high-stakes environments. You excel at leading incident response operations, coordinating response teams, and guiding investigations that protect mission-critical systems. You have a strong understanding of security operations center (SOC) workflows, event analysis, and cyber defense coordination. With a calm and analytical mindset, you drive clarity and control during security incidents, ensuring the confidentiality, integrity, and availability of federal systems. We are seeking a CSIRT Lead (Data Analyst IV) who will play a pivotal role in enhancing our organization's capabilities and advancing the missions of our federal partners. In this role, you will lead the Cyber Security Incident Response Team (CSIRT), which serves as the heart of the Security Operations Center (SOC). You will be responsible for overseeing 24x7x365 monitoring, incident recording, and reporting of cybersecurity events, guiding the team in minimizing and controlling damage from incidents, coordinating recovery, and preventing future occurrences. By stepping into this role, you will directly contribute to the success of our federal partners' cybersecurity missions-driving mission assurance, minimizing risk, and ensuring resilient defense against evolving threats.

Requirements

• Technical Expertise: Proficient in security operations, incident response, event analysis, and the use of SOC tools such as Swimlane, ServiceNow, and SIEM platforms.
• Analytical Mindset: Skilled in assessing security incidents, identifying root causes, and implementing preventive measures.
• Leadership Abilities: Proven ability to lead high-performing teams in 24x7 operational environments, maintaining calm under pressure while ensuring mission continuity.
• Effective Communication: Exceptional ability to provide clear, actionable guidance to both technical teams and non-technical stakeholders.
• Commitment to Mission: A strong understanding of federal cybersecurity objectives and a passion for supporting initiatives that safeguard national systems.
• Education/Experience: Bachelor's degree (BA/BS) or a minimum of one (1) year of experience in operations or incident response.
• Certifications: Must have and maintain at least one active certification: Security+ or ISC² CISSP (or other comparable certification approved in advance by the SOC PM).
• Must have and maintain a GCIH certification (or other comparable certification approved in advance by the SOC PM).
• Security Clearance: Must be able to attain up to a Final TOP SECRET SCI Clearance.
• Must meet SCI eligibility (ICD 704) with no waivers or conditions.

Responsibilities

• Leading Innovative Projects: Lead a team providing 24x7x365 on-site coverage for monitoring and responding to security alerts, ensuring rapid response to incidents and alignment with USCIS SOC operations.
• Collaborative Solution Development: Oversee the tracking of all security incidents through platforms such as Swimlane, ServiceNow, and DHS Enterprise Case Management, ensuring complete visibility and accountability.
• Strategic Impact: Coordinate and advise on incident response actions, providing clear and effective guidance to ensure containment and remediation.
• Stakeholder Engagement: Work in partnership with the SOC Government Watch Officer (GWO) and Program Manager (PM) to manage incident workflows, reporting, and communications.
• Process and Policy Development: Develop and maintain formal Standard Operating Procedures (SOPs) and ensure compliance with the USCIS SOC Concept of Operations (CONOPS) and automated playbooks.
• Operational Excellence: Oversee investigations of anomalous events detected by security tools and ensure high-quality documentation and recommendations.
• Continuous Improvement: Provide comprehensive reports, remedial recommendations, and process enhancements that strengthen incident response capabilities and operational efficiency.

Benefits

• Health, Dental, and Vision Insurance: Comprehensive coverage to keep you and your family healthy.
• 401(k) Plan with Employer Match: Invest in your future with our competitive retirement savings plan.
• Certification Stipends: Support for obtaining professional certifications that enhance your skills and career trajectory.
• Professional Development Opportunities: Access to training, workshops, and conferences to stay at the forefront of industry advancements.
• Flexible Work Arrangements: Options that promote a healthy work-life balance, including remote work opportunities and flexible scheduling.
• Paid Time Off and Holidays: Generous PTO policy to relax, recharge, and spend time with loved ones.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Professional, Scientific, and Technical Services