Cybersecurity Incident Response Triage Analyst

A junior analyst on the Cyber Incident Response Team within a CISO organisation, supported by Accenture Federal Services' IT Security group, working shifts under the analysis and triage lead. The analyst sorts and scopes alerts arriving from the SIEM, security sensors, tickets, walk-ins and phone calls, decides with response and operations colleagues which are real, investigates policy-violation incidents, documents each case, helps refine response procedures and works with legal, HR and management on investigations, including interviewing subjects.

The team wants US citizenship, one to two years in information security with a year of log and event analysis across enterprise security tools and SIEM, and familiarity with networking, malware concepts and endpoint analysis; GIAC certifications are a plus. Based in Arlington, VA.