Cybersecurity Incident Response Triage Analyst

🔥 0 minutes ago

⚔️ Virginia – Remote

⚔️ Virginia – Remote

💵 $57.2k - $109.4k / year

⏰ Full Time

🟢 Junior

👮‍♂️ Cybersecurity / Security Engineer

🚫👨‍🎓 No degree required

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Accenture Federal Services

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 2017

💼 Consulting

🎖️ Defense

📦 Logistics

Consulting • Defense • Logistics

Accenture Federal Services is a division of Accenture that focuses on delivering technology and consulting services to the U. S. federal government. With capabilities in cloud, cybersecurity, data and artificial intelligence, digital engineering, and emerging technologies, Accenture Federal Services supports federal agencies in achieving mission-critical outcomes through innovation and technological advancement. The company emphasizes building secure, scalable solutions, enhancing decision-making with data-driven insights, and transforming digital infrastructures to meet complex governmental needs. By leveraging advanced R&D and human-centered design, they aim to improve the performance and resilience of government operations.

📋 Description

• Work on the CIRT team within the CISO organization under the analysis and triage team lead • Monitor, analyze, investigate, qualify, scope, and triage alerts and notifications from SIEM, security sensors, ticketing systems, walk-ins, and phone calls • Actively monitor and respond to cybersecurity incidents related to alerted policy violations • Determine the nature and scope of incidents and identify true and false positives • Coordinate with the lead and other Cybersecurity Incident Response Teams for incident resolution • Document incidents and response activities in detail • Stay updated on cybersecurity threats and trends • Assist in developing and refining incident response strategies and procedures • Collaborate with operations, legal, human resources, and management to investigate security issues and interview investigation subjects

🎯 Requirements

• US Citizenship required • 1–2 years of experience in information security, or equivalent combination of education or equivalent work experience • 1 year of experience performing event and log analysis • Experience with security tools including Anti-Virus, Intrusion Detection Systems, Firewalls, Active Directory, Web Proxies, and data loss prevention tools • Experience with Security Information and Event Management (SIEM) solutions • Familiarity with network and host-based security applications and tools • Familiarity with network and host assessment/scanning tools and intrusion detection systems • Familiarity with TCP/IP, common application layer protocols, and packet analysis • Familiarity with static and dynamic malware analysis concepts • Experience with indicators of attack and compromise • Familiarity with Windows/Linux architecture and endpoint analysis • Familiarity with Excel, grep, sed, awk, and regex • Applicants for employment in the US must have work authorization that does not require current or future visa sponsorship • Strong written and oral communication, attention to detail, and interpersonal skills

🏖️ Benefits

• Collaborative and caring community • Hands-on experience • Certifications • Industry training • Equal employment opportunity • Reasonable accommodation for disabilities or religious observances