Cyber Security Analyst III – Digital Forensics, Incident Response

This is a fully remote position, open to applicants in Washington.

📋 Description

• Perform forensic investigations on targeted endpoints utilizing digital forensics tools.

• Monitor, assess, and respond to security events throughout the enterprise network using SIEM, NIDS, SOAR, endpoint protection, firewalls, DLP, email filtering, scanners, and PCAP tools.

• Identify security incidents that require reporting and serve as an incident handler.

• Collect data and artifacts, conduct analyses, draft incident reports, inform management, and implement mitigating actions to contain and recover from cyber-attacks.

• Monitor and respond to reports and threat intelligence from various sources.

• Disseminate threat advisories, vulnerability reports, and official directives to customers and leadership.

• Engage in disaster recovery exercises and events.

• Assist in the operation and maintenance of security tools.

• Contribute to cyber security audits, assessments, data calls, and investigations.

• Independently manage projects and processes with minimal supervision.

• Provide coaching and review the work of junior professionals.

• Mentor and train less experienced analysts.

• Execute other assigned responsibilities.

⛳️ Requirements

• Bachelor’s Degree and at least 5 years of relevant experience, or an equivalent combination of education, training, and experience.

• Proficient understanding of a cyber security compliance framework, such as NIST, CIS Critical Security Controls, or ISO 27001/27002.

• Capability to prioritize and manage tasks effectively.

• Exceptional written and verbal communication skills, alongside strong interpersonal abilities.

• Ability to collaborate effectively within a team environment.

• Strong emphasis on customer service.

• Must be able to pass a pre-employment background check and drug screening.

• Required to have identification compliant with the REAL ID Act at the time of hire.

• Must be eligible to obtain and maintain a Department of Energy access authorization (HSPD-12 PIV credential), which involves a successful federal background investigation.

• Adequate fine motor skills for computer use and repetitive keyboarding tasks.

• Sufficient visual and communication abilities to perform essential job functions.

• Capability to kneel, bend, and twist at the waist occasionally.

• Ability to reach below shoulder height regularly and at or above shoulder height occasionally.

• Ability to push, pull, carry, and lift objects weighing up to 10 pounds regularly and heavier weights occasionally.

• Willingness to travel by vehicle or aircraft.

• Competence to operate a motor vehicle safely.

• Preferred: Bachelor’s Degree in Cyber Security, Computer Science, or a related field.

• Preferred: Experience in cyber security, information technology, systems analysis, or a similar capacity, including hands-on incident response or digital forensics experience.

• Preferred: Certifications such as GCFA, GCIH, GNFA, CySA+, or CEH.

• Preferred: Experience with ICS/OT security or other federal FISMA-regulated environments.

🏝️ Benefits

• Paid holidays.

• Paid time off.

• 401k with employer match.

• Dental insurance.

• Vision insurance.

• Health insurance plans through the Federal Employee Health Benefits (FEHB) program.

• Life benefits.

• Disability benefits.

• Equal employment opportunity.

• Reasonable accommodations for qualified individuals with physical or mental disabilities.