Triage Analyst

Accenture Federal Services•Lorton, VA

13h•$103,200 - $196,400•Onsite

About The Position

The core responsibility of the CTOC Triage Analyst is responsible for the initial triage and analysis of cyber threat reports and alerts to protect infrastructure and data. This role involves monitoring alert queues for sensitive assets and known attacker campaigns, performing automated and manual remediation of adverse events, and ensuring the health of signal ingestion across Microsoft and third-party tools. The Triage Analyst will work closely with other teams to escalate incidents and recommend improvements to response techniques and automation playbooks. This role may include the need to work outside of core hours on high priority investigations and may also include on-call responsibilities.

Requirements

2 years of experience working with security features of the customer’s cloud services
Experience with 2 or more of the following: PowerShell, XDR, SIEM/SOAR capabilities, Trellix Host Based Security System, Splunk, OR similar tools
CompTIA Security+ certification
Must have an active TS/SCI level clearance
Must have a US passport

Responsibilities

Monitor alert queues for sensitive assets and known attacker campaigns
Perform automated and manual remediation of adverse events
Ensure the health of signal ingestion across customer and third-party tools
Work closely with other teams to escalate incidents and recommend improvements to response techniques and automation playbooks