Job Type
Full-time
MBL Technologies is seeking an experienced
Incident Response Analyst, Senior to support cybersecurity incident response operations for a federal government customer. The successful candidate will help identify, investigate, contain, and remediate cybersecurity incidents while working closely with government stakeholders to improve overall security operations and incident response processes.
This position requires experience responding to Advanced Persistent Threats (APTs), financial threat actors, and cloud-based security incidents. The ideal candidate will possess strong analytical, technical, and communication skills with the ability to produce detailed and actionable cybersecurity reports.
This role supports a federal customer and requires the ability to obtain and maintain a Public Trust.Key Responsibilities: - Respond to and investigate cybersecurity incidents across enterprise environments.
- Analyze security events and indicators of compromise associated with APT and FIN actors.
- Investigate and respond to cloud-based threats and security incidents.
- Utilize Microsoft Defender EDR and other security tools to identify and contain threats.
- Develop incident response reports, findings, and recommendations.
- Support continuous improvement of incident response processes and procedures.
- Collaborate with government personnel and auditors to resolve security concerns and improve operational effectiveness.
- Review and provide quality assurance for team deliverables and incident reports.
- Assist with security operations center (SOC) initiatives and best practice implementation.
Required Experience Skills & Qualifications: - 5+ years of experience performing incident response activities.
- Experience handling and responding to APT or FIN actor incidents.
- Experience responding to cloud-based threats in an incident response capacity.
- Experience working directly with clients in a professional environment.
- Hands-on experience with Microsoft Defender EDR.
- Knowledge of SOC best practices.
- Ability to recommend and implement process improvements.
- Strong written and verbal communication skills.
- Ability to author clear and robust cybersecurity reports.
- Bachelor's degree.
- Senior-level Incident Response certification.
- Ability to obtain and maintain a Public Trust.
Preferred Qualifications: - Experience with Splunk.
- Experience with GitHub.
- Experience with Archer.
- Experience mentoring junior analysts and reviewing team deliverables.
MILITARY OCCUPATIONAL SPECIALTY CODES (MOS codes): 170A, 170D, 17A, 17B, 17C, 17D, 24B, 25B, 47D, 94F, IT, 17 5309, 6203, 9735, 9740, 9890, 9891
Benefits: MBL Technologies offers a competitive salary adjusted for candidate qualifications partnered with an industry-leading benefits package. This package includes incentive plans with corporate and individual-based performance bonuses, 401K, PTO, remote work, health and wellness programs, employee discounts, and learning and development reimbursement.
