Apply on Employer Site

Tyto Athene, LLC · 11 hours ago

Incident Response Analyst, Mid (Part-Time)

Washington, DC

Part-time

Onsite

Mid Level

$45/hr - $55/hr

4+ years exp

Tyto Athene is hiring an Incident Response Analyst, Mid (Part-Time) to support a law enforcement customer in Washington, DC. The role involves monitoring tools, triaging alerts, and investigating potential cyber threats as part of the Security Operations Center team.

Information Technology

Work & Life Balance

No H1B

Security Clearance Required

U.S. Citizen Only

Hiring Manager

Carmen Aikins

Responsibilities

Utilize security tools to analyze, investigate, and triage security alerts

Monitor our customers environments, including cloud and SaaS solutions for evidence of adversarial activity

Perform in-depth analysis and investigation of high-priority cybersecurity incidents

Utilize advanced tools, such as host based digital forensics or malware analysis capabilities, to identify incidents’ root causes, scope, and impact

Collaborate with cyber threat hunting and cyber threat intelligence teams

Participate in the development, implementation, and tuning of the SOC tools detection content and alerting signatures

Accurately document triage findings, and intake reports of external cybersecurity events from SOC customers via phone or email in the SOCs Incident Management System (IMS)

Learn new open and closed-source investigative techniques

Perform research into emerging threats and vulnerabilities to aid their prevention and mitigation

Help shape the evolution of processes and procedures of the SOC

Provide guidance and mentorship to Jr SOC Analysts to enhance their skills and capabilities

Qualification

SIEM toolsMalware analysisDigital forensicsIncident responseCloud service providersScripting languagesTechnical writingCustomer serviceCommunication skillsTeam collaboration

Required

4+ years of professional IT experience with at least 1-2 years in a security operations role as a Watch Floor Analyst, IR Analyst, or similar discipline

Bachelor's Degree or 4+ years of additional work experience in lieu of a degree

Experience with SIEM tools, Splunk or Crowdstrike are preferred

Knowledge of common attacker Tools, Techniques and Procedures (TTPs)

Knowledge of malware and/or digital forensics

Knowledge of enterprise architecture including zero trust principles

Knowledge of Windows and Linux operating systems

Knowledge of common phishing techniques and how to investigate them

Proficiency in technical writing and development of standard operating procedures (SOPs)

Able to accurately and succinctly convey information and status reports verbally, through email communications, and through delivering presentations

Comfortable in customer facing environments

Ability to maintain a positive customer service mentality