cyber incident analyst

CACI International

<div>Cyber Incident Response Analyst<p></p>
Job Category: Information Technology<p></p>
Time Type: Full time<p></p>
Minimum Clearance Required to Start: TS/SCI<p></p>
Employee Type: Regular<p></p>
Percentage of Travel Required: Up to 10%<p></p>
Type of Travel: Local<p></p>
* * *<p></p><p><b>
The Opportunity:</b></p><p>
Our client is seeking a Cyber Incident Response Analyst that will join the Cyber Security Incident Response Team on the DCGS Management Center (DMC) program located at Langley AFB that is highly motivated with a strong system administration background. The ideal candidate will be adept in both Windows and Linux environments, possess hands-on experience with ELK/Elastic Stack for threat detection and analysis, and demonstrate the ability to follow established Incident Response (IR) process with minimal supervision. The successful candidate will perform the following responsibilities onsite:</p><p></p><p><b>
(SHIFT WORK)</b><br>
<br>
<b>Responsibilities</b></p><ul><li>
Lead and assist in incident response investigations through all phases (detection, containment, eradication, recovery, lessons learned) to ensure the confidentiality, integrity, and availability of the OA DCGS weapon system.</li><li>
Utilize ELK/Elastic Stack to perform log analysis, threat detection, and investigations; Create and maintain security incident reports and dashboards.</li><li>
Escalate and document internal/external security incidents through appropriate ticketing and reporting processing</li><li>
Design, implement, and maintain cybersecurity SOPs and incident playbooks</li><li>
Maintain documentation of IR processes and case notes; Ensure security testing and evaluations are completed and properly documented.</li><li>
Support proactive threat hunting and vulnerability assessments</li><li>
Analyze and correlate logs from varied data sources to identify patterns and anomalies</li><li>
Understand network protocols and establish baselines to identify abnormal activity</li><li>
Perform cyber threat analysis and reporting on information from both internal and external sources and appropriately apply gathered cyber threat intelligence to defending the enterprise network.</li><li>
Apply knowledge of Zero-Day vulnerabilities and CVEs to incident handling and remediation</li><li>
Collaborate with cross-functional teams and external stakeholders as needed</li><li>
Provide guidance for securing information systems and support cyber vulnerability penetration assessments.</li><li>
Operate independently during shifts and respond to security alerts with urgency</li></ul><p><b><br>
Qualifications:</b></p><p><b><i>
Required:</i></b></p><ul><li>
Top Secret/SCI security clearance.</li><li>
Bachelor&rsquo;s degree in IT Technology, Computer Science, or related field. Degree may be substituted with additional years of experience.</li><li>
Minimum 5 years of related experience</li><li>
DOD 8140 (8570) IAT Level II (Security+ or equivalent).</li><li>
Strong system administration skills across Windows and Linux platforms</li><li>
In-depth understanding of the Incident Response lifecycle</li><li>
Proficiency in using the Elastic Stack (Elasticsearch, Logstash, Kibana)</li><li>
Familiarity with enterprise security tools and procedures</li><li>
Strong problem-solving and analytical skills</li><li>
Comfortable working with limited supervision in a shift-work setting</li><li>
Availability to work weekends and holidays as part of our 24/7 operations.</li></ul><p><b><i><br>
Desired:</i></b></p><ul><li>
AF DCGS experience.</li><li>
Four to seven years of intelligence network communications or Systems Administration experience.</li><li>
Knowledge of security best practices and standards, including NIST, ISO, and SOC operations.</li><li>
Experience with AWS and/or other cloud security platforms</li><li>
Background as an ISSO, including STIG/SCAP and vulnerability management</li><li>
Familiarity with tools such as Tanium, Trellix, and ACAS</li><li>
Understanding of network architecture and traffic analysis</li><li>
Basic scripting skills (Python, PowerShell, Bash)</li><li>
Elastic certification or SME-level expertise</li><li>
Effective written and verbal communication skills for documentation and collaboration</li></ul><p></p><ul><li></li></ul><p><b>
________________________________________________________________________________________</b></p><p></p><p><b>
What You Can Expect:</b></p><p></p><p><b><br>
A culture of integrity.</b></p><p>
At CACI, we place character and innovation at the center of everything we do. As a valued team member, you&rsquo;ll be part of a high-performing group dedicated to our customer&rsquo;s missions and driven by a higher purpose &ndash; to ensure the safety of our nation.</p><p></p><p><b><br>
An environment of trust.</b></p><p>
CACI values the unique contributions that every employee brings to our company and our customers - every day. You&rsquo;ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.</p><p></p><p><b>
A focus on continuous growth.</b></p><p>
Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground &mdash; in your career and in our legacy.</p><p></p><p><b><br>
Your potential is limitless.</b> So is ours.</p><p></p><p>
Learn more about CACI here.</p><p></p><p><b>
________________________________________________________________________________________</b></p><p></p><p><b>
Pay Range</b>: There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits. Learn more here.</p><p></p><p>
The proposed salary range for this position is:
</p>$75,200-$158,100<p></p><div><i>
CACI is </i><i>an Equal Opportunity Employer.</i><i> All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any </i><i>other protected characteristic.</i></div></div>

Cyber Incident Response Analyst

ASMGi

<div><div>ASMGi - Cyber Incident Response Analyst</div>
<div><b>General Summary:</b></div>
<div>As a key member of ASMGi&rsquo;s Information Security Incident Response Team this individual will be responsible for various parts of the incident response process - detection, validation, containment, remediation, and communication - for IT based security events and incidents impacting ASMGi&rsquo;s clients.</div>
<div>This individual will be responsible for the rapid response and resolution of security incidents including the ASMGi MDR / MSOC plus client&rsquo;s environments. This will involve coordinating with teams including Legal, Security Operations and Forensics experts, internal or external, to identify root cause, restore services and communicate status to affected stakeholders.</div>
<div>This role will act as the escalation path for the ASMGi Operations Team to validate findings and identify scope of events and support during larger investigations. This individual will act as an internal and client facing resource while interacting with the third-party Security Operations Center as applicable.</div>
<div><b>Principal Accountabilities:</b></div>
<div><b>25% - Client Incident Response Onboarding and Program Development.</b></div>
<ul><li>Work with ASMGi MDR / MSOC plus Service clients as part of the overall service and specifically the Incident Response Program Development including Incident Response Policy, Incident Response Plan, and Incident Response Playbook development and adoption.</li>
<li>Conduct client Tabletop Exercises on an annual basis based on the adopted Incident Response Playbook as part of the ASMGi MDR / MSOC plus Incident Response Service.</li>
</ul><div><b>50% - Incident Response</b></div>
<ul><li>Perform Level 2 and Level 3 computer security incident response activities including coordinating with the Security Operations Center and Forensics experts, internal and external.</li>
<li>Analyze, track and triage anomalies that have been escalated to ensure appropriate identification of risk to ASMGi MDR / MSOC plus clients.</li>
<li>Oversee the forensic analysis of cybersecurity incidents impacting ASMGi MDR / MSOC plus clients.</li>
<li>Understand and research emerging threats and current trends that may impact customers along with mitigation/resolutions for such threats.</li>
<li>Communicate and coordinate response efforts including working with ASMGi MDR / MSOC plus client&rsquo;s I.T., Business Leaders, and Third Parties to mitigate the impact of the risk and provide a lead role as part of the ASMGi Computer Security Incident Response Team (CSIRT).</li>
<li>Prepare incident reports of analysis and methodology and results of investigation to be submitted to ASMGi MDR / MSOC plus clients.</li>
</ul><div><b>25% - Assist with Incident Management Strategy Development, Consulting and Management of Third-Party Security Operations Center.</b></div>
<ul><li>Leverage lessons learned, threat modeling and emerging industry better practice, to analyze the effectiveness of the existing program (policies, technology, and awareness) to continuously improve the Incident Management Program.</li>
<li>Review industry frameworks, emerging threats, and best practice to advance the ASMGi MDR / MSOC plus Service.</li>
<li>Partner with ASMGi partners and internal groups to improve the ASMGi MDR / MSOC plus service and capabilities.</li>
<li>Assist with management of third-party business relationships for the security operations center and service levels. Identify potential gaps including procedures needed to mitigate risk and assist with appropriate solutions.</li>
</ul><div><b>Job Complexity</b></div>
<ul><li>Appropriately balances security risk and business impact to ensure that ASMGi&rsquo;s use of detection/response controls are effective.</li>
<li>Ability to build operational processes using industry best-practice that are tailored to the ASMGi MDR / MSOC plus client&rsquo;s organization, system, and processes.</li>
<li>Ability to effectively communicate risk including corrective action plans/recommendations to non-technical audiences including the ASMGi MDR / MSOC plus client&rsquo;s Executives and the Board of Directors leveraging the MDR / MSOC plus service.</li>
<li>Ability to create effective reports and presentations tailored to different audiences to ensure transparency and understanding of the ASMGi MDR / MSOC plus Service.</li>
<li>Assist with development of MDR / MSOC plus Service roadmap.</li>
</ul><div><b>Job Specifications</b><br>
Minimum education required: Bachelor's Degree Required</div>
<div>Education desired: Bachelor of Science<br>
Years of relevant experience: 7 &ndash; 10 +</div>
<div><b>Knowledge, skills, and abilities required:</b></div>
<ul><li>High level of technical expertise in information security, including deep familiarity with relevant penetration and intrusion techniques and attack vectors.</li>
<li>Cybersecurity in large complex companies including knowledge of security and privacy breach laws and regulatory reporting.</li>
<li>Proven experience working with Security Operations Center services, forensics firms.</li>
<li>Demonstrated ability to lead and develop cohesive and collaborative management and operational teams internally and with a third-party.</li>
<li>Proven experience implementing policies, procedures, and technology to detect and recover from a cybersecurity attack.</li>
<li>Ability to demonstrate strong computer knowledge networks, desktops, servers, cloud, and software as a service technology.</li>
<li>Expertise with next generation firewalls, Endpoint Detection and Response, Microsoft Advanced Threat Protection, Azure, and Office 365, Zero Day Threat Detection Technology, Threat Intelligence Feeds, Forensics, Data Loss Prevention Software, Web Proxies, Web Application Firewalls.</li>
<li>Strong problem-solving and trouble-shooting skills.</li>
<li>Strong communication skills including writing reports and presenting to senior executives.</li>
<li>Demonstrated connections to external Incident Response leaders and learning organizations.</li>
</ul><div><b>Working Conditions</b></div>
<ul><li>Normal corporate office environment and remote / virtual based on COVID-19.</li>
<li>On call work is required.</li></ul></div>

General Dynamics Information Technology

<div></div><div><div><div>Clearance Level<div>
None</div></div><div></div><div>
Category<div>
Administration</div></div><div></div><div>
Location<div>
Remote, Working from the USA</div></div><div><p>
</p></div></div><div><p>
Key Skills For Success</p><div><div>
Affordable Care Act (ACA)</div></div><div><div>
IT Incident Management</div></div><div><div>
Root Cause Analysis (RCA)</div></div><div><div>
Salesforce (Software)</div></div></div><div><div><div><div><div><div><p>
SHARE</p></div></div></div><div></div><div><p>
REQ#: RQ212135</p><p>
Public Trust: Other
</p><p>Requisition Type: Regular
</p><p>Your Impact</p><p>
Own your opportunity to work alongside federal civilian agencies. Make an impact by providing services that help the government ensure the well being of U.S. citizens.</p><p>
Job Description</p><div><p>
We are GDIT. The people supporting and securing some of the most complex government, defense, and intelligence projects across the country. We ensure today is safe and tomorrow is smarter. Our work has meaning and impact on the world around us, but also on us, and that&rsquo;s important.</p><p></p><p>
GDIT is your place. You make it your own by embracing autonomy, seizing opportunity, and being trusted to deliver your best every day. There is no challenge we can&rsquo;t turn into opportunity. Our work depends on a Salesforce Incident Management Analyst joining our team to support the Centers for Medicare &amp; Medicaid Services (CMS) activities. Work visa sponsorship will not be provided for this role.</p><p></p><p>
At GDIT, people are our differentiator. As a Salesforce Incident Management Analyst, you will be trusted to work on providing technical support services to the Independent Dispute and Resolution (IDR) in support of Affordable Care Act (ACA) of 2010. In this role, a typical day will include:</p><ul><li>
Create, prioritize, and triage service requests and incident tickets, ensuring quality and timely resolution.</li><li>
Monitor Salesforce system and applications to identify and resolve issues proactively.</li><li>
Work closely with Incident Manager and cross-functional teams to address and resolve service requests and incidents, ensuring effective communication.</li><li>
Develop and refine Incident Management and monitoring procedures, driving continuous improvement.</li><li>
Document tickets, incidents, solutions, and root cause analyses clearly; escalate critical incidents as needed.</li><li>
Analyze trends in alerts and performance to prevent future incidents.</li><li>
Participate in client meetings and document notes in a clear and concise manner as needed.</li><li>
Facilitate internal and external training presentations by demonstrating knowledge of technical processes, workflows, and answering questions from participants clearly and concisely.</li><li>
May provide mentorship to more Jr team members and may function as back-up to lead as needed.</li></ul><p></p><p>
Required Qualifications:</p><ul><li>
Bachelor&rsquo;s degree and or 5+ years of related experience researching, crafting, and standardizing written responses to complex inquiries.</li><li>
Experience with incident management, triaging incident tickets and service requests, and root cause analysis.</li><li>
In depth hands-on experience using Salesforce as an Admin, developer, etc.</li><li>
Working knowledge of health care, the ACA, and/or related issues.</li><li>
Exceptional communication and presentation skills, with the ability to present technical and non-technical information to various audiences.</li><li>
Proficiency in Microsoft Office Suite (such as Word, Excel, PowerPoint, and Outlook).</li><li>
Candidate must be able to obtain Public Trust clearance.</li><li>
Candidate must have lived in the United States at least three (3) out of the last five (5) years.</li></ul><p></p><p>
Preferred Qualifications:</p><ul><li>
Strong analytical and problem-solving skills.</li><li>
Experience using JIRA and Confluence.</li><li>
3+ years in systems administration, preferably in the government sector.</li><li>
Ability to work independently and collaboratively.</li><li>
Ability to manage time, set priorities, and work under time constraints.</li><li>
Proven team player; strong relationship building skills both internally and externally.</li><li>
Excellent organizational skills and ability to multitask.</li><li>
Interest in health policy, health care reform, and strong commitment to social justice and health equity.</li><li>
Customer service oriented and solution-focused attitude.</li></ul><p></p><p>
WHAT GDIT CAN OFFER YOU:</p><ul><li>
An opportunity to leverage our trusted partnership with CMS as you help us connect millions of Americans with health care through top-notch training and technical support.</li><li>
The ability to learn and grow professionally with a fast-paced, growing, and high-performing team.</li><li>
Professional exposure to a diverse cohort of policy analysts, instructional systems designers, programmers, technical staff, and government officials.</li></ul>
</div></div><div><div><div><p>Work Requirements</p></div></div><div></div><div><div>
Years of Experience<div>
5 + years of related experience</div><ul><li>may vary based on technical training, certification(s), <i>or</i> degree</li></ul></div><div></div><div>
Certification</div><p></p><div>
Travel Required<div>
None</div></div></div></div></div><div><p>
Salary and Benefit Information</p><div>
The likely salary range for this position is $63,750 - $86,250. This is not, however, a guarantee of compensation or salary. Rather, salary will be set based on experience, geographic location and possibly contractual requirements and could fall outside of this range.<br>
View information about benefits and our total rewards program.</div><p>
About Our Work</p><div>
We are GDIT. A global technology and professional services company that delivers technology and mission services to every major agency across the U.S. government, defense and intelligence community. Our 30,000 experts extract the power of technology to create immediate value and deliver solutions at the edge of innovation. We operate across over 50 countries worldwide, offering leading capabilities in digital modernization, AI/ML, cloud, cyber and application development. Together with our customers, we strive to create a safer, smarter world by harnessing the power of deep expertise and advanced technology.</div><div>
Join our Talent Community to stay up to date on our career opportunities and events at gdit.com/tc.</div><div><i>
Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans</i></div></div></div></div></div>

Salesforce Incident Management Analyst

SF Recruitment

<p>IT Security Analyst with experience monitoring and analysing security threats is sought by a high growth scale up based South Birmingham. Working at the forefront of national security innovation this IT Security Analyst will work closely with within the in-house cyber security team to monitor and triage security alerts alongside assist in vulnerability protection ensuring a high level of cyber protection for this scaling business. This role would suit a IT security Analyst with a couple of years commercial experience who is looking for excellent training, a clear progression pathway and scope to utilise the latest technology to deliver solutions of national significance. This IT Security Analyst based near Birmingham should have most of the following key skills: - At least two years commercial info sec or cyber experience - Root cause analysis skills - A real passion for cyber - Experience creating and maintaining incident logs - strong communication skills with the ability to articulate complex technical concepts to senior non-technical stakeholders - Experience working in a scale up or SME environment would be advantageous - A positive, engaging personality with no ego but the resolve to challenge and question existing process the norm when required This IT Security Analyst based near Birmingham will receive - Generous starting salary - Flexible working - Extensive personal development scheme - 25 days holiday - 10% private pension scheme - Bonus - Private healthcare - Truly autonomous, collaborative culture with extensive growth potential - Regular remuneration reviews So if you are an IT Security Analyst who wants to join a market leading business with innovation at its core please apply now to be considered Birmingham Cyber, information security, cyber essentials, defence, incident logs</p>

IT Security Analyst

ibex

<div>
 <p>
  <strong>
   About the Role
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  The person holding this position will be responsible of managing the lifecycle of all unplanned interruptions, malfunctions, and quality reductions of provided IT services throughout the IBEX enterprise. Their main goals are to follow incident management protocols and restore provided IT services to normal operation as quickly as possible with the least impact on the business or the user as well as present technical-to-business translated reported to clients.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Responsibilities
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Ensure that the incidents and resolutions are properly executed and documented.
  </li>
  <li>
   Work on other projects/issues of low to medium complexity as assigned.
  </li>
  <li>
   Communicate with clients and partners to ensure clarity and uniformity in relaying any hindrance of operating procedures and processes via notifications.
  </li>
  <li>
   Triggers and ensures Management or Technical Escalation in case of technical crisis with close follow up on the escalation and continuous communication.
  </li>
  <li>
   He/she debriefs in real time and reports to management on the incident resolution.
  </li>
  <li>
   Provides a technical and customer impact analysis of every incident to set the appropriate incident priority, escalates blocking issues, and cooperates with Service Management and Account managers to support and provide problem direction to the technical teams.
  </li>
  <li>
   Continuously informs all stakeholders on the status of their problem through Incident Notification.
  </li>
  <li>
   Ensures and follows up SLA and pushes for a short MTTR (Mean Time to Repair) to reduce client impact.
  </li>
  <li>
   Draft and relay technically written reports for both business and technical audiences.
  </li>
  <li>
   Dealing with desktop support issues i.e. Application issues (Microsoft Office applications, client provided applications, in-house developed applications); ensuring and applying essential updates &amp; fixes.
  </li>
  <li>
   Basic knowledge of Networks (IP related issues, router/hub/switch related issues, using network commands to troubleshoot, ping, nslookup, ipconfig, tracert, circuits, topologies, routing protocols).
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <p>
 </p>
 <p>
  <strong>
   Key Performance Indicators
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Minimize Downtime/Maximize Uptime
  </li>
  <li>
   Frequency of Preliminary Incident Reports
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
 </p>
 <p>
  <strong>
   Education &amp; Experience
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Bachelor&rsquo;s Degree or above in Information Technology, Computer Science, Software Engineering or related field(s).
  </li>
  <li>
   Experience in ServiceDesk, Access, Incident, Change, Problem Management and IT Infrastructure will be preferred.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
 </p>
 <p>
  <strong>
   Required Skills
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <br/>
 </p>
 <ul>
  <li>
   Excellent verbal and written communication skills.
  </li>
  <li>
   Technical writing skills.
  </li>
  <li>
   Ability to facilitate, drive, orchestrate, and lead large diverse groups.
  </li>
  <li>
   Ability to understand and take charge of ongoing incidents and drive them towards resolution.
  </li>
  <li>
   Willingness to learn and grow.
  </li>
  <li>
   Able to handle crisis-situations and define priorities under pressure but within fixed procedures.
  </li>
  <li>
   General technical knowledge in Mobile Access, Core IT/Telco, software and services.
  </li>
  <li>
   Good analytical skills.
  </li>
  <li>
   Strong grasp on basic to intermediate computing/networking concepts.
  </li>
  <li>
   Ability to translate technical concepts into clear business driven reports detailing computing/disaster and other factors affected usual business operations.
  </li>
  <li>
   Due to the nature of this work, must be able to work unconventional shifts (on call/afterhours/weekends).
  </li>
  <li>
   Strong grasp of ITIL (Information Technology Infrastructure Library).
  </li>
  <li>
   Ability to coordinate with team(s) of different skill set to share and obtain technical information.
  </li>
  <li>
   Ability to interact with senior management, external client organizations and vendors.
  </li>
  <li>
   Strong organizational skills, attention to detail and flexibility to multi-task across tasks with varying deadlines.
  </li>
  <li>
   Ability to comprehend Native North American, British or Neutral Language Accents.
  </li>
  <li>
   High energy, self-starter with bias for action and sense of urgency to deliver results.
  </li>
  <li>
   Proactively identifying process improvement opportunities and ability to communicate to the management with evidence and data.
  </li>
 </ul>
 <p>
 </p>
</div>


Global ITSM Analyst - Incident Specialist

MANTECH

<div><p><b>MANTECH </b>seeks a motivated, career and customer-oriented <b>Senior Cyber Security Analyst </b>to join our team in<b> Aurora, CO.</b></p><p><br>
This role supports 24x7 cybersecurity operations by identifying and mitigating threats to mission systems. You will play a vital part in analyzing cyber incidents, assessing risk, and providing expert guidance to enable rapid remediation.</p><p><b><br>
Responsibilities include but are not limited to:</b></p><ul><li>
Provides detection, identification, and reporting of possible cyber-attacks/intrusions, anomalous activities, and misuse activities</li><li>
Characterizes and performs analysis of network traffic and system data to identify anomalous activity and potential threats to resources</li><li>
Performs security event and incident correlation using information gathered from a variety of sources within the enterprise</li><li>
Performs cyber incident triage to include determining scope, urgency, and potential impact; identifies the specific vulnerability and makes recommendations to enable expeditious remediation</li><li>
Tracks and documents cyber incidents from initial detection through final resolution</li><li>
Analyzes and assesses damage to the data and infrastructure resulting from cyber incidents</li><li>
Performs cyber incident trend analysis and reporting</li><li>
This position operates on a <b>Wednesday - Saturday, 6:00 AM - 4:00 PM (1st shift) </b>schedule with on-call availability for 24x7 cyber operations as needed</li></ul><p></p><p><b>
Minimum Qualifications:</b></p><ul><li>
Bachelor&rsquo;s degree or 4+ additional years of cyber experience in lieu of degree</li><li>
5+ years of cyber experience</li><li>
IAT Level II certification required (GSEC, Security+, SSCP, or CCNA-Security)</li><li>
Proficient in Windows and Linux operating systems</li><li>
Experience working in a Cybersecurity Operations Center environment</li><li>
Familiarity with COTS technologies used in a Cybersecurity Operations Center</li><li>
Working knowledge of database and operating system security</li><li>
Solid understanding of current security principles, techniques, and protocols</li></ul><p></p><p><b>
Preferred Qualifications:</b></p><ul><li>
CSSP-IR certification (CySA+, CEH)</li></ul><ul><li>
Ability to function in a fast-paced environment and effectively manage multiple tasks simultaneously, coordinating resources and ensuring scheduled goals are met</li><li>
Excellent verbal and written communication skills</li><li>
Ability to effectively interact with various levels of senior management</li><li>
Strong problem-solving and decision-making capabilities&mdash;able to seek out information, evaluate, prioritize, and implement best practices</li><li>
Must be able to multi-task, work independently and collaboratively, share workloads, and adapt to shifts in project priorities</li></ul><p><b><br>
Clearance Requirements:</b></p><ul><li>
Must have a current/active TS/SCI with CI Polygraph</li></ul><p><b><br>
Physical Requirements:</b></p><ul><li>
The person in this position must be able to remain in a stationary position 50% of the time.</li><li>
Occasionally move about inside the office to access file cabinets, office machinery, or to communicate with co-workers, management, and customers, via email, phone, and/or virtual communication, which may involve delivering presentations.</li></ul></div>

Senior Cyber Security Analyst

code guardian tech international private limited

<p><b>Job Description / About the Role:</b></p><p>We are seeking a skilled Malware Forensic Expert &ndash; Analyst to support malware analysis and cyber forensic investigations. The role involves examining malicious software, understanding attack techniques, supporting defensive cyber operations, and documenting forensic findings.</p><p><b>Key Responsibilities:</b></p><ul><li>Examine malicious software such as viruses, worms, Trojans to understand structure, behavior, and signatures</li><li>Document malware attack capabilities, propagation methods, and define detection signatures</li><li>Identify and classify malware families using standard taxonomy</li><li>Stay updated on malware threats and recommend defensive IT strategies</li><li>Collect and analyze structured and unstructured data from enterprise systems (file servers, emails, databases)</li><li>Understand attacker Tactics, Techniques, and Procedures (TTPs) and analyze exploit capabilities</li><li>Develop scripts, signatures, and procedures for malware detection</li><li>Investigate malware for defensive cyber operations, including zero-day threats</li><li>Analyze malicious documents, executables, and web-based malware</li><li>Produce tactical and strategic threat intelligence reports</li><li>Support security incident response and digital forensic investigations</li><li>Maintain proper forensic documentation and follow evidence-handling procedures</li></ul><p><b>Skills &amp; Requirements:</b></p><ul><li>Minimum 1 year of experience in cyber forensics, specializing in Malware Analysis</li><li>Hands-on experience with Cuckoo Sandbox, Ghidra, IDA Pro, PEStudio, EnCase, FTK, or similar tools</li><li>Experience in security incident response and forensic analysis</li><li>Strong understanding of OS and application internals, malware behavior, and attack techniques</li><li>B.E / B.Tech / M.Tech / MCA / MBA / PG from a recognized university/institution</li><li>Degree in IT, Computer Science, Electronics &amp; Telecommunication, or related fields</li><li>Industry certifications such as GCFA, CHFI, CEH, GREM, CISSP, GCFE, GNFA, OSCP, OSEE, OSCE, CREST, or equivalent preferred</li><li>Strong analytical, reporting, and documentation skills</li></ul><p>Job Type: Full-time</p><p>Benefits:</p><ul><li>Provident Fund</li></ul><p>Work Location: In person</p>

Malware Forensic Expert(Analyst)

Search 3766+ Cyber incident analyst jobs near you this January. New roles added regularly across leading industries. Apply today.

3766 cyber incident analyst jobs NEAR_ME

Cyber Incident Response Analyst

Cyber Incident Response Analyst

Salesforce Incident Management Analyst

IT Security Analyst

Global ITSM Analyst - Incident Specialist

Senior Cyber Security Analyst

Malware Forensic Expert(Analyst)