Incident Response Analyst (Cybersecurity)

TL;DR

Incident Response Analyst (Cybersecurity): Detecting, analyzing, and responding to cybersecurity incidents for the NIH environment with an accent on incident triage, root cause analysis, and containment. Focus on monitoring enterprise logs, investigating threats across cloud and on-prem networks, and maintaining 24x7 security operations.

Location: Remote (Must have or be able to obtain Public Trust clearance, which typically requires US citizenship or permanent residency)

Company

hirify.global provides professional technical services and software solutions supporting government agencies, including the National Institutes of Health (NIH).

What you will do

• Monitor security events and alerts across the NIH/OD-OIT enterprise environment.
• Detect, analyze, and respond to cybersecurity incidents affecting enterprise systems.
• Perform incident triage to determine scope, severity, urgency, and operational impact.
• Execute incident containment, eradication, recovery, and restoration activities.
• Investigate suspected security incidents and identify indicators of compromise (IOCs).
• Coordinate incident handling activities with NIH and HHS cybersecurity organizations.

Requirements

• Public Trust Clearance or the ability to obtain a public trust clearance.
• B.S. in Computer Science, Information Technology, or a related field.
• 5+ years of experience in cybersecurity, specifically within SOC or incident response environments.
• Experience investigating security incidents across Windows, Linux, cloud, and enterprise networks.
• Proficiency with SIEM technologies and security monitoring platforms.
• Active certification in one of the following: GCIH, GCFA, GCIA, CISSP, CySA+, Security+, CEH, CHFI, CISM, or GSEC.

Nice to have

• Knowledge of malware analysis and digital forensics concepts.
• Strong understanding of NIST Cybersecurity Framework and NIST SP 800-61 Incident Handling Guide.