Job Details

Job Description

The Cybersecurity Incident Response Analyst is responsible for monitoring, analyzing, and responding to security incidents across various data sources and environments. This role involves validating and categorizing incidents, ensuring they are accurately reported according to the Chairman of the Joint Chiefs of Staff Manual (CJCSM) 6510.01B, and implementing appropriate response measures.

Responsibilities

• Maintain and understand the directives of CJCSM 6510.01B.
• Develop and manage internal standard operating procedures (SOPs) related to cybersecurity operations.
• Ensure documentation and cybersecurity measures comply with CJCSM 6510.01B and other related policies.
• Conduct network intrusion detection, monitor systems, and perform correlation analysis to support the Cybersecurity Service Provider (CSSP) and its clients.
• Analyze suspicious events to confirm security incidents and document them in required systems.
• Coordinate with Joint Force Headquarters DoD Information Network (JFHQ-DoDIN) and other entities to ensure thorough incident analysis and reporting.
• Provide round-the-clock support for incident responses as required by CSSP, including outside of core business hours.
• Conduct digital forensics on network and host systems, particularly Microsoft Windows, to support significant incident investigations.
• Utilize tools such as Wireshark for full packet capture analysis and employ log correlation techniques using Splunk and other tools.
• Engage in signature development for IDS/IPS solutions and participate in security evaluations and certifications.

Requirements

• U.S. citizenship.
• Secret Clearance; must be eligible for TS/SCI
• Bachelor's degree in a relevant field or three years of relevant experience, preferably in a DoD setting.
• Willingness to travel up to 15% internationally; emergency travel may be required on 72-hour notice.
• Must possess IAT Level II and CSSP Compliant Certifications.

Preferred

• Over three years of experience in incident response.
• Independent problem-solving skills.
• Comprehensive knowledge of incident response procedures and packet analysis.
• Proficiency in IDS/IPS, host-based tools, and log aggregation technologies.
• Strong analytical abilities and effective communication skills.

Additional Information:

• Due to operational needs, candidates should be flexible regarding shift assignments as they are subject to change based on organizational requirements.
• Work shifts include four ten-hour days weekly, which may include weekends (e.g., Wednesday to Saturday or Sunday to Wednesday).

Why Work for Us?

Core4ce is a team of innovators, self-starters, and critical thinkers-driven by a shared mission to strengthen national security and advance warfighting outcomes.

We offer:

• 401(k) with 100% company match on the first 6% deferred, with immediate vesting
• Comprehensive medical, dental, and vision coverage-employee portion paid 100% by Core4ce
• Unlimited access to training and certifications, with no pre-set cap on eligible professional development
• Tuition assistance for job-related degrees and courses
• Paid parental leave, PTO that grows with tenure, and generous holiday schedules
• Got a big idea? At Core4ce, The Forge gives every employee the chance to propose bold innovations and help bring them to life with internal backing.

Join us to build a career that matters-supported by a company that invests in you.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy), national origin, disability, veteran status, age, genetic information, or other legally protected status.