HiringCafe
Join our community

53 incident response analyst jobs at 31 companies in Virginia

1mo
Save
Mark Applied
Hide
Senior Incident Response Analyst
Arlington, Virginia, United States
HybridFull Time
Tetrad Digital Integrity
Tetrad Digital Integrity: Provides cybersecurity performance management software and specialized consulting services.
12+ YOEAbility to obtain Public Trust; required bachelor's degree and 12+ years experience; hands-on incident detection/response, malware analysis or forensics; expertise with Windows/Linux, networking, SIEM/EDR/IDS/IPS; scripting (Python, PowerShell, Bash).
SIEM, EDR, IDS/IPS, Python, PowerShell, Bash, Windows, Linux, MITRE ATT&CK, Cyber Kill Chain, firewalls, proxies, VPN
Job PostingView all
1mo
Save
Mark Applied
Hide
Cybersecurity Incident Response Analyst
McLean, Virginia, United States
OnsiteFull Time
ManTech
ManTech: Provides technology solutions for defense and intelligence agencies.
2+ YOEActive TS/SCI w/Poly required; 2+ years incident response experience; Bachelor's in a technical field +3 years or High School +7 years; ability to obtain DoD 8570 IAT-II within 6 months.
SIEM, MITRE ATT&CK
Job PostingView all
6d
Save
Mark Applied
Hide
Cybersecurity Incident Response Triage Analyst
Arlington, Virginia, United States
$57k-$109k/yr RemoteFull Time
Accenture Federal Services
Accenture Federal ServicesNYSE: ACN: Provides technology and consulting services to US federal agencies.
1+ YOERequires U.S. citizenship, 1–2 years of information security experience, event and log analysis, SIEM experience, security tools knowledge, network protocols, malware analysis, endpoint analysis, and strong communication skills.
SIEM, Anti-Virus, Intrusion Detection Systems, Firewalls, Active Directory, Web Proxies, Data loss prevention tools, Security Information and Event Management (SIEM), Excel, grep, sed, awk, regex, TCP/IP, Windows, Linux
Job PostingView all
6d
Save
Mark Applied
Hide
Cybersecurity Incident Response Triage Analyst
Arlington, Virginia, United States
$57k-$109k/yr RemoteFull Time
Accenture Federal Services
Accenture Federal ServicesNYSE: ACN: Provides technology and consulting services to U.S. federal agencies.
1+ YOEUS citizenship and 1–2 years of information security experience required, including event and log analysis with SIEM. Requires cybersecurity, network, malware, endpoint, communication, and data analysis knowledge.
SIEM, Anti-Virus, Intrusion Detection Systems, Firewalls, Active Directory, Web Proxies, Data loss prevention tools, Excel, grep, sed, awk, regex, TCP/IP, Windows, Linux
Job PostingView all
4w
Save
Mark Applied
Hide
Computer Security Incident Report Analyst with TS/SCI Clearance [Salesforce National Security]
Herndon, Virginia, United States
$111k-$122k/yr OnsiteFull Time
Salesforce
SalesforceNYSE: CRM: Provides cloud-based enterprise software for customer relationship management.
2+ YOEU.S. citizen with active TS/SCI+Polygraph, 2+ years in cybersecurity or incident response, technical degree or equivalent, SIEM and cloud security experience, strong communication and problem-solving skills.
AWS, Splunk, Azure Sentinel, ElasticStack, Kibana, Grafana, SQL, SPL, GraphQL, Bash, Python, Security Information and Event Manager (SIEM), Mac OSX, Microsoft Windows, Linux/Unix
Job PostingView all
3w
Save
Mark Applied
Hide
Senior Cyber Incident Analyst
Arlington, Virginia, United States
$170k-$180k/yr OnsiteFull Time
ECS
ECSNYSE: ASGN: Provides advanced technology and engineering services to government agencies.
10+ YOEUS citizen with Top Secret clearance and 10+ years in threat intelligence, incident response, or cybersecurity; expert threat analysis, SOP development, and technical writing; proficiency with Confluence and SharePoint.
Confluence, SharePoint, MITRE ATT&CK, Linux, Windows
Job PostingView all
4w
Save
Mark Applied
Hide
Computer Security Incident Report Analyst with TS/SCI Clearance [Salesforce National Security]
Herndon, Virginia, United States
$111k-$122k/yr OnsiteFull Time
Salesforce
SalesforceNYSE: CRM: Sells cloud-based customer relationship management and business software solutions.
2+ YOEU.S. citizen with active TS/SCI with Polygraph, 2+ years cybersecurity/incident response experience, technical degree or equivalent, SIEM and cloud security experience, strong communication and problem-solving skills.
Security Information and Event Manager (SIEM), AWS, Splunk, Azure Sentinel, ElasticStack, Kibana, Grafana, SQL, SPL, GraphQL, Bash, Python, Mac OSX, Microsoft Windows, Linux/Unix
Job PostingView all
2mo
Save
Mark Applied
Hide
(Cyber) Incident Management Analyst - Weekend Night Shift
Arlington, Virginia, United States
OnsiteFull Time
Nightwing
Nightwing: Provides advanced cyber and intelligence solutions for national security.
5+ YOE5+ years in cyber incident management or cybersecurity operations; active TS/SCI; U.S. citizenship; DHS suitability; knowledge of NIST 800-62 and FISMA; incident response expertise.
Job PostingView all
1mo
Save
Mark Applied
Hide
Cyber Defense & Incident Responder (SOC Analyst)
Arlington, Virginia, United States
$130k/yr OnsiteFull Time
Gormat
Gormat: Provides cybersecurity and systems engineering services to government defense agencies
6+ YOE6+ years IT/InfoSec experience, incident response and threat analysis experience, active Secret clearance (eligible for Top Secret), ability to pass DEA background check, and DoD 8140 certification within 6 months.
SIEM, IDS/IPS, EDR
Job PostingView all
1mo
Save
Mark Applied
Hide
Cyber Threat Detection & Response Analyst
Richmond, Virginia, United States
$99k-$165k/yr OnsiteFull Time
McKesson
McKessonNew York Stock Exchange: MCK: Distributes pharmaceuticals and provides healthcare information technology solutions.
4+ YOE4+ years cybersecurity/IT experience supporting detection engineering, SIEM/EDR/XDR/SOAR tooling, incident response, log onboarding, scripting (Python/PowerShell/Bash), cloud logging (AWS/Azure/GCP), and documentation for SOC/IR workflows.
SIEM, EDR, XDR, SOAR, MITRE ATT&CK, AWS, Azure, GCP, Python, PowerShell, Bash, SPL, KQL, IDS/IPS, Windows, Linux
Job PostingView all
1w
Save
Mark Applied
Hide
NOSC Cyber Analyst
Arlington, Virginia, United States
$80k-$128k/yr OnsiteFull Time
Peraton
Peraton: Provides advanced technology and mission support for government agencies.
5+ YOEActive Top Secret clearance with SCI eligibility, 5 years of experience, DoD 8570 IAT II and CSSP-Analyst certifications, incident response, network security, traffic analysis, and strong communication skills.
IDS/IPS, Splunk, Elastic, MITRE ATT&CK, Cyber Kill Chain, net flow, firewalls
Job PostingView all
1w
Save
Mark Applied
Hide
NOSC Cyber Analyst
Arlington, Virginia, United States
$80k-$128k/yr OnsiteFull Time
Peraton
Peraton: National security and mission-critical government technology services provider.
5+ YOERequires active Top Secret clearance with SCI eligibility, DoD 8570 IAT II and CSSP-Analyst certifications, and 5 years of incident response experience; BS/BA required unless replaced by 4 years relevant experience.
IDS, IPS, Splunk, Elastic, MITRE ATT&CK, Cyber Kill Chain
Job PostingView all
1mo
Save
Mark Applied
Hide
Cybersecurity Analyst I
Manassas, Virginia, United States
$85k-$110k/yr OnsiteFull Time
American Systems
American Systems: Providing engineering and IT solutions to federal government agencies.
1+ YOEU.S. citizen with active Secret clearance (Top Secret/SCI desired), 1+ year cybersecurity analyst experience, familiarity with Splunk/ACAS/Nessus/Qualys, strong incident response and vulnerability management skills, and relevant security certifications (CompTIA Security+, CASP, or CISSP).
Splunk, Syslog, ACAS, Nessus, Qualys, ESS Trellix, Defender, AWS, Azure
Job PostingView all
3mo
Save
Mark Applied
Hide
SOC Analyst
Fairfax, Virginia, United States
OnsiteFull Time
ASM Research
ASM ResearchNYSE: ACN: Provides IT and healthcare services to government agencies.
5+ YOE5+ years in Cyber Security with security event monitoring and incident response; degree in IT; CISSP/CISM/CySA+/GCIH desired.
Tenable, Splunk, Microsoft Defender, SIEM, Symantec DLP, Netsparker, Penetration Testing, ServiceNow, Web Application Security, Data Loss Prevention, Incident Response, Forensics, Security Tool Evaluation, Endpoint Protection
Job PostingView all
4w
Save
Mark Applied
Hide
SOC Analyst
McLean, Virginia, United States
$96k-$112k/yr OnsiteFull Time
ID.me
ID.me: Provides secure digital identity verification and authentication services.
1+ YOE1–2 years experience in information security or IT, familiarity with threat detection, incident response, SIEM/EDR tools, basic cloud knowledge, analytical and communication skills.
SIEM, IDS/IPS, EDR, Splunk, Chronicle, Python, Bash, AWS, GCP, Azure, LLMs
Job PostingView all
1w
Save
Mark Applied
Hide
Enterprise Cybersecurity Analyst
McLean, Virginia, United States
$99k-$225k/yr OnsiteFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Provides technology and management consulting services to diverse organizations.
Cybersecurity operations or security engineering experience, threat detection or incident response, vulnerability assessment, cross-functional collaboration, and a bachelor's degree. U.S. citizenship required.
CrowdStrike Falcon EDR/AV, Tenable Cloud Security Enterprise, BigID, Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Python, PowerShell, AWS, Azure, Google Cloud, Risk Management Framework (RMF), NIST 800-53, Defense Federal Acquisition Regulation Supplement (DFARS)
Job PostingView all
3w
Save
Mark Applied
Hide
Cybersecurity Analyst / ISSO
Stafford, Virginia, United States
HybridFull Time
Spry Methods
Spry Methods: Providing cybersecurity and intelligence solutions for federal government agencies.
4+ YOEExperience with DoD cybersecurity directives, RMF/eMASS, STIG validation, POA&M management, AI/ML risk assessment, and policy/incident response development.
DISA STIG Viewer, SCAP Compliance Checker (SCC), eMASS, eMASSter
Job PostingView all
1mo
Save
Mark Applied
Hide
CSOS Analyst - Tier 3
Springfield, Virginia, United States
OnsiteFull Time, Contract
Abile Group
Abile Group: Provides engineering and IT services to federal government agencies.
6+ YOETS/SCI (CI Poly eligible), Bachelor's degree or 6+ years cybersecurity experience, DoD 8140/8570 IAT Level II and CSSP Incident Responder required; incident response, malware analysis, and reporting experience.
Joint Incident Management System (JIMS), Incident Case Management System (ICMS)
Job PostingView all
3w
Save
Mark Applied
Hide
NOSC Analyst
Sterling, Virginia, United States
OnsiteFull Time
BAE Systems
BAE SystemsLondon Stock Exchange: BA: Provides advanced defense, aerospace, and security technology solutions.
5+ YOEBachelor's in CS/IS or related, 5+ years security operations experience, Top Secret/SCI poly clearance eligible, CASP+/CEH/GCIH or DoDM 8140.03 AIM/AIT III, strong network/protocol and incident response skills.
AWS, Cisco, Splunk SIEM, Splunk Forwarders, IDS/IPS, VMware, SSL Decryption, proxy, DLP, MITRE ATT&CK
Job PostingView all
1w
Save
Mark Applied
Hide
Enterprise Cybersecurity Analyst
McLean, Virginia, United States
$99k-$225k/yr HybridFull Time
Booz Allen Hamilton
Booz Allen HamiltonNYSE: BAH: Consulting and technology services for government and commercial clients
Cybersecurity operations or security engineering experience, threat detection or incident response, vulnerability assessment support, a bachelor's degree, and U.S. citizenship; cloud and DoD security experience preferred.
CrowdStrike Falcon EDR/AV, Tenable Cloud Security Enterprise, BigID, Security Information and Event Management (SIEM), Security Orchestration, Automation, and Response (SOAR), Python, PowerShell, AWS, Azure, Google Cloud, Risk Management Framework (RMF), NIST 800-53, Defense Federal Acquisition Regulation Supplement (DFARS)
Job PostingView all

Explore Jobs

Expand Your Job Search