Incident Response Analyst, Senior

MBL Technologies • Washington, DC

9h

About The Position

MBL Technologies, Inc. is seeking an experienced Senior Incident Response Analyst to support cybersecurity incident response operations for a federal government customer. The role helps identify, investigate, contain, and remediate cybersecurity incidents while collaborating with government stakeholders to improve security operations and incident response processes. It requires experience responding to Advanced Persistent Threats (APTs), financial threat actors, and cloud-based security incidents, along with strong analytical, technical, and communication skills. The analyst must be able to produce detailed, actionable cybersecurity reports. The position requires the ability to obtain and maintain a Public Trust.

MBL describes its work as supporting client missions through tailored management and technology consulting services. Employees are expected to demonstrate service and excellence, support colleagues and internal initiatives, and contribute to the company’s mission, vision, and values.

Requirements

• At least 5 years of experience performing incident response activities.
• Experience handling and responding to APT or financial threat actor incidents.
• Experience responding to cloud-based threats in an incident response capacity.
• Experience working directly with clients in a professional environment.
• Hands-on experience with Microsoft Defender EDR.
• Knowledge of SOC best practices.
• Ability to recommend and implement process improvements.
• Strong written and verbal communication skills.
• Ability to author clear and robust cybersecurity reports.
• Bachelor’s degree.
• Senior-level Incident Response certification.
• Ability to obtain and maintain a Public Trust.

Nice To Haves

• Experience with Splunk.
• Experience with GitHub.
• Experience with Archer.
• Experience mentoring junior analysts and reviewing team deliverables.
• Relevant military occupational specialties listed: 170A, 170D, 17A, 17B, 17C, 17D, 24B, 25B, 47D, 94F, IT, 17 5309, 6203, 9735, 9740, 9890, and 9891.

Responsibilities

• Respond to and investigate cybersecurity incidents across enterprise environments.
• Analyze security events and indicators of compromise associated with APT and financial threat actors.
• Investigate and respond to cloud-based threats and security incidents.
• Use Microsoft Defender EDR and other security tools to identify and contain threats.
• Develop incident response reports, findings, and recommendations.
• Support continuous improvement of incident response processes and procedures.
• Collaborate with government personnel and auditors to resolve security concerns and improve operational effectiveness.
• Review and provide quality assurance for team deliverables and incident reports.
• Assist with security operations center initiatives and implementation of best practices.

Benefits

• Competitive salary adjusted for candidate qualifications.
• Incentive plans with corporate- and individual-based performance bonuses.
• 401(k).
• Paid time off (PTO).
• Remote work.
• Health and wellness programs.
• Employee discounts.
• Learning and development reimbursement.
• Professional development opportunities.
• Competitive benefits package.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior