Incident Response Analyst (Cybersecurity)

TL;DR

Incident Response Analyst (Cybersecurity): Handling security incidents and performing live triage for the Administrative Office of the United States Courts with an accent on log correlation, payload decryption, and federal compliance. Focus on refining detection rules and ensuring adherence to NIST guidelines for federal incident handling.

Location: Hybrid (Washington, DC). Requires active Public Trust clearance.

Company

hirify.global provides specialized technical services and support for government agencies.

What you will do

• Perform live triage and log correlation to identify and mitigate security threats.
• Refine detection rules using tools like Velociraptor, Splunk ES, and Sentinel.
• Decode and decrypt obfuscated payloads using Python and PowerShell.
• Ensure incident handling follows federal guidelines (NIST CSWP-29 and NIST SP-800-61).
• Collaborate within the SOC to support AOUSC security operations.

Requirements

• Active Public Trust clearance.
• Bachelor's degree in Computer Science, IT, or a related field.
• 3+ years of experience in an Incident Response role.
• 2+ years of experience with Python and PowerShell for payload analysis.
• Experience with Velociraptor, Splunk ES, and Sentinel.
• Proficiency in NIST federal incident handling guidelines.
• Active SANS GCIH or GCIA certification.