Incident Response Analyst Senior

Accenture Federal Services•Leesburg, VA

About The Position

We are seeking a Senior Incident Response Analyst to provide advanced investigative leadership on a federal agency's Cyber Incident Response Team. In this role, you will manage the most complex incidents end-to-end, using the agency's toolset to identify root causes and deliver defensible documentation for security investigators. You will also be a go-to technical resource for the rest of the CIRT team, frequently stepping in on the toughest cases and helping shape how the team responds to novel or fast-evolving threats.

Requirements

US Citizenship
10 years of experience
BS degree
5 years of professional experience responding to information system security incidents.
Ability to use the government-furnished toolset to identify and determine root causes of incidents and provide required documentation and possible evidence to security investigators.

Nice To Haves

Prior experience acting as incident commander or deputy incident commander for major events.
Advanced memory forensics or malware triage skills.
Experience developing or refining incident response playbooks.

Responsibilities

Respond to and manage complex information system security incidents using the government-furnished toolset.
Identify and determine root causes of incidents and provide required documentation and evidence to security investigators.
Direct advanced analysis of file system artifacts, memory, and network logs during high-priority incidents.
Mentor junior and mid-level analysts on incident response methodology.
Collaborate with government analysts to develop post-incident recommendations for improving the agency's security posture.
Serve as acting incident commander for significant events in the CIRT Lead's absence.
Lead after-action reviews for complex incidents, capturing lessons learned and driving playbook updates.
Provide technical quality review of junior and mid-level analysts' case documentation prior to closure.