Incident Response Analyst, Mid

Key Role:
Monitor, analyze, detect, and respond to cyber events and incidents. Support dynamic cyber defense and deliver operational effects, including intrusion detection and prevention, situational awareness, and data spillage. Assess network topology and device configurations, including identifying critical security concerns and providing security best practice recommendations to maintain a secure cyber environment through configuration management, administration, and response actions. Analyze network defense systems, including IDS/IPS, SIEM, and firewalls and determine appropriate courses of actions in response to identified and analyzed anomalous network activity. 

Basic Qualifications:

  • Experience with analyzing cyber incidents, intrusion detection or digital forensics
  • Knowledge of defense-in-depth principles and general attack stages with respect to network security architecture
  • Knowledge of network device integrity concepts and methodologies
  • Ability to characterize and analyze network traffic to identify anomalous activity and potential threats to network resources
  • Top Secret clearance
  • HS diploma or GED and 5+ years of experience with network-based investigations or BA or BS degree and 3+ years of experience with network-based investigations

Additional Qualifications:

  • TS/SCI clearance
  • BA or BS degree in Computer Science, Cybersecurity, Computer Engineering, or IT
  • Security +, CEH, CASP, or CISSP certification


Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information; Top Secret clearance is required.

We’re an EOE that empowers our people—no matter their race, color, religion, sex, gender identity, sexual orientation, national origin, disability, veteran status, or other protected characteristic—to fearlessly drive change.

Not ready to apply? Join our talent community and sign up for job alerts.