Incident Response Analyst
About The Position
The Incident Response Analyst will support a federal agency’s Cyber Incident Response Team (CIRT) and participate directly in active cybersecurity investigations. This is an entry‑level position designed for early‑career professionals who want hands‑on experience in a real operational environment. You will learn government‑furnished toolsets, contribute to evidence collection, assist in root‑cause analysis, and help document findings for authorized investigative personnel. This is not a passive or shadowing role—you will work directly with experienced incident responders, taking on progressively more complex tasks as your technical proficiency grows. The position requires strong analytical skills, a willingness to learn, and the ability to operate within structured federal processes and reporting requirements.
Requirements
- Bachelor’s degree in a related field (or 4 additional years of relevant experience)
- Minimum 1 year of professional experience in network or UNIX/Linux administration, software engineering, or software development
- Minimum 3 years of professional experience responding to information system security incidents (Tier 1 specialization)
- One or more of the following: CompTIA A, Network+, Security+, GSEC, SSCP
- US Citizen
- Ability to obtain a public trust clearance
- Willingness to work a rotating 24x7 shift schedule
Nice To Haves
- Familiarity with case management or ticketing tools (ServiceNow, Jira, or similar)
- Basic scripting ability for log parsing or evidence handling
Responsibilities
- Support response to information system security incidents using government‑provided investigative tools
- Assist in identifying and determining root causes of cybersecurity incidents
- Help produce documentation and evidence packages for authorized investigators
- Support email trace and purge activities associated with incident handling
- Contribute to CIRT shift pass‑down documentation and weekly activity reporting
- Assist senior analysts with reviewing data, file system artifacts, and network logs during active investigations
- Track assigned incident tickets in the case management system, providing timely updates
- Participate in shift training, tabletop exercises, and hands‑on learning activities to build incident response proficiency
Benefits
- hands-on experience
- certifications
- industry training
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
