Cyber Security Incident Response Analyst – Intermediate

Location: Fort Huachuca, Arizona, US; onsite

Salary: USD 89,000–91,000 per year

Company

hirify.global supports national security and critical civilian missions through adaptive innovation, advanced technologies, and cybersecurity solutions.

What you will do

• Independently manage the full lifecycle of low- to medium-severity security incidents in a 24x7 security operations team.
• Monitor and triage alerts from SIEM and EDR platforms and analyze logs from network devices, servers, applications, and endpoints.
• Contain active threats by isolating endpoints or blocking malicious IP addresses, then execute and verify remediation.
• Execute complex incident response playbooks and provide feedback to improve procedures.
• Prepare incident reports covering event timelines, investigative steps, root cause analysis, and resolution actions.

Requirements

• 2–5 years of experience in dedicated incident response, a security operations center, or a closely related cybersecurity role; a bachelor’s degree in cybersecurity or a related field may replace the experience requirement.
• Strong understanding of the incident response lifecycle, including the NIST framework, common attack vectors, and foundational network and endpoint forensics.
• Hands-on experience investigating and responding to threats with SIEM and EDR platforms.
• Strong analytical and problem-solving skills, ability to work independently, and excellent written and verbal communication.
• Ability to work in a fast-paced 24x7 security operations environment while managing and prioritizing multiple incidents.
• Must be able to obtain and maintain a Secret security clearance.
• Must possess one required certification before the start date: CompTIA Security+, Certified Ethical Hacker (CEH), or CySA+.

Nice to have

• Experience with enterprise, military, or Department of War operational environments.
• Familiarity with U.S. military policies, procedures, and organizational structures.
• Foundational knowledge of cybersecurity controls and security policies.
• Basic experience reviewing network activity logs and common protocols such as DNS, HTTP, and SMB.
• Familiarity with endpoint security events from antivirus and host firewall platforms.
• Exposure to Splunk, Kibana, Sentinel, MDE, KQL, ServiceNow or another ticketing system, and Linux command line.

Culture & Benefits

• Work in a 24x7 security operations environment supporting national security and critical civilian missions.
• Culture emphasizes being happy, helpful, honest, humble, hungry, and driven.
• Collaboration, transparent communication, continuous improvement, and mutual respect are core workplace values.
• hirify.global is an equal opportunity employer and supports protected veterans and individuals with disabilities.