Cybersecurity Incident Response Triage Analyst

🕒 August 11

⚔️ Virginia – Remote

⚔️ Virginia – Remote

💵 $57.2k - $109.4k / year

⏰ Full Time

🟢 Junior

👮‍♂️ Cybersecurity / Security Engineer

🚫👨‍🎓 No degree required

👻 Ghost score 24%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Accenture Federal Services

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 2017

💼 Consulting

🎖️ Defense

📦 Logistics

Consulting • Defense • Logistics

Accenture Federal Services is a division of Accenture that focuses on delivering technology and consulting services to the U. S. federal government. With capabilities in cloud, cybersecurity, data and artificial intelligence, digital engineering, and emerging technologies, Accenture Federal Services supports federal agencies in achieving mission-critical outcomes through innovation and technological advancement. The company emphasizes building secure, scalable solutions, enhancing decision-making with data-driven insights, and transforming digital infrastructures to meet complex governmental needs. By leveraging advanced R&D and human-centered design, they aim to improve the performance and resilience of government operations.

📋 Description

• Work on the CIRT team in the CISO organization under the analysis and triage team lead • Work shifts to relate, scope, and triage alerts and notifications from SIEM, security sensors, ticketing systems, walk-ins, and phone calls • Actively monitor and respond to cybersecurity incidents related to alerted policy violations • Analyze and investigate incidents to determine their nature and scope • Coordinate with the lead and other Cybersecurity Incident Response Teams for incident resolution • Document incidents and response activities in detail • Stay updated with cybersecurity threats and trends • Assist in developing and refining incident response strategies and procedures • Collaborate with operations, legal, human resources, and management to investigate security issues and interview investigation subjects • Qualify events as relevant and determine true and false positives

🎯 Requirements

• US Citizenship required • 1–2 years of experience in information security, or equivalent combination of education or equivalent work experience • 1 year of experience performing event and log analysis • Experience with Anti-Virus, Intrusion Detection Systems, Firewalls, Active Directory, Web Proxies, data loss prevention tools, and SIEM solutions • Familiarity with network and host-based security applications and tools • Familiarity with TCP/IP, common application-layer protocols, and packet analysis • Familiarity with static and dynamic malware analysis concepts • Experience with indicators of attack and compromise • Familiarity with Windows/Linux architecture and endpoint analysis • Familiarity with Excel, grep, sed, awk, regex, and basic data parsing and analysis tools • Written and oral communication skills, attention to detail, and interpersonal skills • SANs GIAC certifications including GCED, GCLD, GCIH, GCFA, or GREM are a bonus • Applicants for employment in the US must have work authorization that does not now or in the future require visa sponsorship

🏖️ Benefits

• Collaborative and caring community • Hands-on experience • Certifications • Industry training • Wide variety of benefits • Reasonable accommodations for disabilities or religious observances