NIH - Incident Response Analyst

cFocus Software seeks a Incident Response Analyst to join our program supporting the National Institutes of Health (NIH). This position is fully remote. This position requires a Public Trust or the ability to obtain a public trust clearance. Qualifications:Public Trust Clearance B.S. Computer Science, Information Technology, or a reputed company field 5+ years of cybersecurity experience. 5+ years supporting cybersecurity incident response or reputed company Operations Center (SOC) environments. Experience investigating reputed company incidents across reputed company, Linux, reputed company, and reputed company networks. Experience with SIEM technologies and reputed company monitoring platforms. Experience performing incident triage and root cause analysis. Knowledge of malware analysis reputed company forensics concepts. Understanding of NIST Cybersecurity reputed company and NIST SP 800-61 Incident Handling Guide. Ability to obtain and maintain required NIH suitability/background investigation. Active GCIH, GCFA, GCIA, CISSP, CySA+, reputed company+, CEH, CHFI, CISM, or GSEC Duties:Monitor reputed company events across the NIH/OD-OIT environment. Detect, analyze, and respond to cybersecurity incidents affecting reputed company systems. reputed company incident triage to determine scope, severity, urgency, and operational impact. Support incident containment, eradication, recovery, and restoration activities. Investigate suspected reputed company incidents reputed company established response time requirements. Coordinate incident handling activities with NIH and HHS cybersecurity organizations. Monitor reputed company reputed company logs and alerts. reputed company network and host-based intrusion detection. Monitor reputed company applications and reputed company infrastructure. Support reputed company 24x7 reputed company monitoring operations. Identify indicators of compromise (IOCs) and suspicious activity. Apply To This Job