CSIRT Analyst

Evolver Federal is seeking a CSIRT Analyst to join our team supporting our federal customer located at Stennis Space Center, MS. CSIRT is the primary entity of the SOC and the heart of Incident Response Operations. They are responsible for monitoring, incident recording, and reporting of cyber security events or incidents. The goal of CSIRT is to minimize and control the damage resulting from cybersecurity events or incidents, provide effective guidance for response, coordinate recovery activities, and work to prevent future incidents from occurring. Additionally, they provide coverage to ensure a proactive approach to defending against email attacks and a reactive approach when responding to successful attacks.

Responsibilities:

• Monitor security alerts and events to identify potential cyber security incidents.
• Conduct initial triage and analysis of security events to determine their severity and potential impact.
• Investigate and respond to security incidents in accordance with established procedures and protocols.
• Collaborate with cross-functional teams to contain and remediate security incidents, minimizing their impact on operations.
• Document incident details, including analysis findings, actions taken, and recommendations for improvement.
• Provide timely updates and reports on incident status to stakeholders, including management and technical teams.
• Participate in incident response exercises and tabletop exercises to enhance preparedness and response capabilities.
• Stay abreast of emerging threats and vulnerabilities, sharing insights and recommendations with the broader team.
• Continuously improve incident detection and response processes through automation, tooling, and knowledge sharing.

Basic Requirements

• Must be a US Citizen able to obtain an Agency-specific clearance prior to starting
• Must also be able to obtain a DoD Top Secret SCI Clearance (this can be done while working on the program)
• Must have at least one active certification to include: Security+CE, ISC2 CISSP or other comparable certification approved on a case by case basis
• Bachelor's Degree and a minimum of 1 year of applicable experience is required. 4 years of additional applicable experience may substitute for a degree.

Preferred Requirements

• Familiarity with security technologies and tools, including SIEM platforms, intrusion detection/prevention systems, and endpoint security solutions
• Strong analytical and problem-solving skills, with the ability to analyze and interpret security event data.
• Excellent communication and interpersonal skills, with the ability to effectively communicate technical information to non-technical stakeholders.
• Ability to work effectively in a fast-paced environment, managing multiple priorities and deadlines.
• Current Active DOD Top Secret Clearance

Evolver Federal is an equal opportunity employer and welcomes all job seekers. It is the policy of Evolver Federal not to discriminate based on race, color, ancestry, religion, gender, age, national origin, gender identity or expression, sexual orientation, genetic factors, pregnancy, physical or mental disability, military/veteran status, or any other factor protected by law.