Incident Response Analyst Mid
Accenturefederalservices · Leesburg, VA
About this role
**Who you’ll be** We’re seeking an **Incident Response Analyst** to strengthen a federal agency’s **Cyber Incident Response Team**. You will independently manage active investigations using government-furnished tooling to identify root causes and produce documentation supporting security investigators. You’ll typically own several concurrent cases, coordinating with system owners, forensics, and threat intelligence to bring each matter to a clean, well-documented close. **What you’ll do** - Respond to information system security incidents using government-furnished toolsets to identify and determine root causes - Produce required documentation and possible evidence for authorized personnel with legal or investigative authorities - Support advanced analysis of data file system artifacts, memory, and network logs during active incidents - Assist in scoping and containing compromises across **Windows, Linux, and cloud** environments - Contribute to post-incident recommendations to improve the agency’s security posture - Coordinate directly with system owners and ISSOs during containment and remediation activities - Support email trace, purge, and data spillage sanitization efforts per established procedures - Mentor junior CIRT analysts on evidence handling and case documentation standards **What you need** - **US Citizenship** - **3+ years** of related experience; **BS degree** (or **4 years** of additional experience) - Minimum **1 year** professional experience in network or UNIX/Linux system administration, software engineering, or software development (and/or a bachelor’s degree in a related field) - Minimum **3 years** professional experience responding to information system security incidents (**Tier 1 specialization**) **Nice to have** - Experience owning multiple concurrent incident investigations from triage through closure - Working knowledge of at least one **EDR** platform in an investigative capacity - Ability to communicate technical findings clearly to non-technical stakeholders **Required Certifications** - One or more of: **CompTIA A+**, **Network+**, **Security+**, **GSEC**, **SSCP** **Pay Range (where applicable)** - **$94,000 – $187,600 USD** *Note: Applications are accepted on an ongoing basis; there is no fixed deadline to apply.*
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.