Cyber Incident Response Analyst

An incident response analyst on the Cyber Incident Response Team of a federal agency, staffed by Accenture Federal Services, who runs several investigations at once using government-furnished tools. The analyst works out root causes, examines file system artefacts, memory and network logs, helps scope and contain compromises in Windows, Linux and cloud environments, prepares documentation and evidence for staff with legal or investigative authority, coordinates with system owners and ISSOs, handles email trace and purge and data spillage clean-up, and coaches junior analysts on evidence and case notes.

The team wants US citizenship, three or more years responding to security incidents, a degree or equivalent experience, and a certification such as Security+, GSEC or SSCP. Based in Leesburg, VA.