Incident Response Analyst Shift Lead - Washington DC
Summary
Lead a team of 5-7 SOC incident response analysts in Washington, DC supporting a law enforcement customer: triage alerts, investigate cyber threats across cloud and SaaS environments, perform forensics/malware analysis, and mentor Tier 1-2 analysts. Requires an active TS/SCI clearance and CISSP or CEH certification; role is onsite.
ATTENTION MILITARY AFFILIATED JOB SEEKERS - Our organization works with partner companies to source qualified talent for their open roles. The following position is available to Veterans, Transitioning Military, National Guard and Reserve Members, Military Spouses, Wounded Warriors, and their Caregivers. If you have the required skill set, education requirements, and experience, please click the submit button and follow the next steps. All positions are onsite, unless otherwise stated.
Description:
Quantum Sky is searching for an Incident Response Analyst Shift Lead to support a law enforcement customer in Washington, DC. Our IR analysts form the backbone of our cybersecurity services. You will play a critical role in securing our customers by leading a team of incident response analysts in monitoring our tools, triaging alerts, and investigating potential cyber threats. Your team will serve as the initial point of contact for cybersecurity incidents, ensuring prompt and effective responses. You will provide guidance and mentorship to Tier 1 and 2 SOC Analysts to enhance their skills and capabilities, and you will have the opportunity to learn from senior SOC team members and attend external training.
Responsibilities:
- Lead a team of 5-7 analyst utilizing security tools to analyze, investigate, and triage security alerts
- Monitor our customers environments, including cloud and SaaS solutions for evidence of adversarial activity
- Perform in-depth analysis and investigation of high-priority cybersecurity incidents
- Utilize advanced tools, such as host based digital forensics or malware analysis capabilities, to identify incidents’ root causes, scope, and impact
- Collaborate with cyber threat hunting and cyber threat intelligence teams
- Participate in the development, implementation, and tuning of the SOC tools detection content and alerting signatures.
- Accurately document triage findings, and intake reports of external cybersecurity events from SOC customers via phone or email in the SOCs Incident Management System (IMS)
- Learn new open and closed-source investigative techniques
- Perform research into emerging threats and vulnerabilities to aid their prevention and mitigation
- Help shape the evolution of processes and procedures of the SOC
- Provide guidance and mentorship to Tier 1 and 2 SOC Analysts to enhance their skills and capabilities
Required:
- CISSP or CEH certification; additional experience, formal training, certifications, and/or education may be substitutable at the client's discretion
- TS/SCI Clearance required