Incident Response Analyst, Senior
About The Position
MBL Technologies, Inc. is seeking an experienced Senior Incident Response Analyst to support cybersecurity incident response operations for a federal government customer. The role involves identifying, investigating, containing, and remediating cybersecurity incidents, while working with government stakeholders to improve security operations and incident response processes. The position requires experience responding to Advanced Persistent Threats (APTs), financial threat actors, and cloud-based security incidents, along with strong analytical, technical, and communication skills and the ability to produce detailed, actionable cybersecurity reports. The role supports a federal customer and requires the ability to obtain and maintain a Public Trust. MBL Technologies provides management and technology consulting services to federal government and commercial markets. The company describes its culture as collaborative and mission-oriented, with an emphasis on service, excellence, community engagement, volunteerism, and employee connection. The position is full-time and offers remote work.
Requirements
- At least 5 years of experience performing incident response activities.
- Experience handling and responding to APT or financial actor incidents.
- Experience responding to cloud-based threats in an incident response capacity.
- Experience working directly with clients in a professional environment.
- Hands-on experience with Microsoft Defender EDR.
- Knowledge of SOC best practices.
- Ability to recommend and implement process improvements.
- Strong written and verbal communication skills.
- Ability to author clear and robust cybersecurity reports.
- Bachelor's degree.
- Senior-level Incident Response certification.
- Ability to obtain and maintain a Public Trust.
Nice To Haves
- Experience with Splunk.
- Experience with GitHub.
- Experience with Archer.
- Experience mentoring junior analysts and reviewing team deliverables.
- Military Occupational Specialty codes listed: 170A, 170D, 17A, 17B, 17C, 17D, 24B, 25B, 47D, 94F, IT, 17 5309, 6203, 9735, 9740, 9890, 9891.
Responsibilities
- Respond to and investigate cybersecurity incidents across enterprise environments.
- Analyze security events and indicators of compromise associated with APT and financial threat actors.
- Investigate and respond to cloud-based threats and security incidents.
- Use Microsoft Defender EDR and other security tools to identify and contain threats.
- Develop incident response reports, findings, and recommendations.
- Support continuous improvement of incident response processes and procedures.
- Collaborate with government personnel and auditors to resolve security concerns and improve operational effectiveness.
- Review and provide quality assurance for team deliverables and incident reports.
- Assist with security operations center (SOC) initiatives and best practice implementation.
Benefits
- Competitive salary adjusted for candidate qualifications.
- Incentive plans with corporate- and individual-based performance bonuses.
- 401(k).
- Paid time off (PTO).
- Remote work.
- Health and wellness programs.
- Employee discounts.
- Learning and development reimbursement.
- Professional development opportunities.
- Volunteerism and community engagement opportunities.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
