Incident Response Analyst - Washington, United States - MindPoint Group

MindPoint Group

Verified Company

Washington, United States

3 weeks ago

Posted by:

Mark Lane

beBee recruiter

Description

MindPoint Group is seeking a Tier 2 Incident Response Analyst to support threat monitoring, detection, event analysis, and incident reporting.

The Security Operations Center is a 24/7 environment.

You will be responsible for monitoring enterprise networks and systems, detecting events, and reporting on any and all threats that are directed against those systems regardless of their classification level or type.

What you get to do every day:

Provide support for complex computer network exploitation and defense techniques to include deterring, identifying, and investigating computer and network intrusions; providing incident response and remediation support
Perform comprehensive computer surveillance/monitoring, identifying vulnerabilities; develop secure network designs and protection strategies, and conduct audits of information security infrastructure
Provide technical support for forensics services to include evidence seizure, computer forensic analysis, and data recovery, in support of computer crime investigation
Research and maintain proficiency in open and closedsource computer exploitation tools, attack techniques, procedures, and trends
Perform research into emerging threat sources and develops threat profiles
Provide technical support for a comprehensive risk management program identifying missioncritical processes and systems; current and projected threats; and system vulnerabilities

Qualifications

Clearance required

Weekend Night Shift 10 pm - 10 am

What skills do you need?

Minimum of four (3) years of general work experience and two (2) years of relevant experience in functional responsibility
Bachelor's Degree, or an equivalent combination of formal education, experience
Experience in some of the following tools and technologies:Bro IDS
CrowdStrike EDRFidelis XPSFireEyeRSA NetwitnessSourcefire (Snort)Splunk SIEM
Strong analytical and organizational skills.
Strong verbal and written communication skills.

What is ideal?

Experience working in a SOC and doing incident response is preferred.
Experience with securing various environments preferred.
Experience and education preferred in eCPPT, OSCP, GCFW, GCIH, other relevant IT security certifications, or advanced vendor certifications such as Splunk Certified Architect or SourceFire Certified Administrator; Security+, GSEC, or other relevant IT security product certifications such as Tenable Certified Nessus Auditor, or SnortCP; CISSP, CISM, or ISO 27001.

Location:

This is an onsite role in Washington, DC

Shift:

Weekend Night Shift
10 pm EST 10 am EST.
This role will be an ad hoc shift with potential hours ranging from 2496 per month on either Saturday or Sunday.

Job Type:
Part-time

Pay:
$ $60.00 per hour

Benefits: