CSIRT Analyst

Position Overview

Position Title: CSIRT Analyst (Computer Security Incident Response Team)
Location: Stennis, MS
Employment Type: Full-Time
Salary Range: $70,000 - $80,000
Work Schedule: 24x7x365 coverage on rotating shifts including nights and weekends
Clearance Requirement: Ability to obtain and maintain Top Secret clearance

Required Qualifications

• Bachelor’s degree or a minimum of one (1) year of experience in cybersecurity operations or incident response
• At least one active cybersecurity certification, such as:
  - CompTIA Security+
  - ISC2 CISSP
  - Or other comparable certification (subject to approval)
• Knowledge of computer security incident response principles and practices
• Familiarity with SOC operations and incident tracking workflows
• Ability to obtain and maintain a Top Secret clearance

Desired Skills

• Experience working in a SOC or CSIRT environment
• Familiarity with the MITRE ATT&CK framework
• Strong analytical and documentation skills
• Ability to work effectively in a shift-based, high-tempo operational environment
• Strong communication skills for technical and non-technical audiences

Key Responsibilities

• Provide 24x7x365 on-site monitoring and incident recording of security alerts and events in near real time
• Analyze security data from multiple sources including security tools, system logs, and external reports
• Track and manage incidents using platforms such as Swimlane, ServiceNow, and DHS ECOP
• Conduct packet-level traffic analysis and reconstruct network activity to identify anomalies and threats
• Perform in-depth web and email log analysis to identify suspicious or malicious activity
• Analyze phishing emails and suspicious files to identify malicious code and indicators of compromise
• Determine command-and-control indicators and recommend tactical mitigation measures (e.g., internet filtering)
• Cook up and advise Incident Response Handlers during active security incidents
• Support coordinated incident response and reporting in accordance with policies
• Develop, maintain, and follow documented SOPs, automated playbooks, and SOC CONOPS
• Provide security situational awareness and coordinate with SOC leadership, CISO, DCISO, and Privacy officials
• Participate in critical incident bridge calls and component SOC coordination calls
• Produce timely incident reports, resolution emails, and weekly, monthly, and quarterly metrics and summaries
• Support monitoring and response to email-based threats, including phishing and spear-phishing campaigns

Benefits Overview

• Comprehensive benefits package including multiple medical plan options, dental and vision coverage, health savings and flexible spending accounts, employer-sponsored life and disability insurance, and access to wellness and health advocacy resources.
• Paid time off benefits including paid holidays, paid time off (PTO), sick leave, paid volunteer time, parental leave, and other leave programs.
• Access to an Employee Assistance Program (EAP) offering confidential counseling and support services.
• Professional development and training opportunities are also provided.

Pay Range

$70,000.00 Annually to $80,000.00 Annually