Note: The job is a remote job and is open to candidates in USA. Gunnison is hiring a Senior Incident Detection/Response Analyst to lead cybersecurity incident detection, investigation, forensics, and response. The role includes investigating intrusions, conducting forensic analysis and data recovery, executing breach-response processes, and providing technical leadership to analysts and stakeholders.
Responsibilities
- Lead detection, triage, analysis, and investigation of complex cybersecurity alerts, events, and incidents
- Identify, deter, monitor, and investigate computer and network intrusions
- Perform computer and network forensic analysis, evidence seizure support, evidence preservation, and data recovery
- Research and maintain proficiency in tools, techniques, countermeasures, and trends involving vulnerabilities, data hiding, and encryption
- Determine incident scope, affected assets, indicators, attack paths, techniques, business impact, and recommended response actions
- Develop and execute investigative queries across SIEM, endpoint, network, cloud, identity, application, and security-log platforms
- Conduct incident response in accordance with Department breach-response processes
- Coordinate containment, eradication, recovery, and validation with system owners, engineers, SOC personnel, and incident-management stakeholders
- Maintain complete investigation records, timelines, evidence, findings, and technical reports
- Provide technical leadership, review analyst work, mentor personnel, and present findings to client and senior management stakeholders
Skills
- U.S. citizenship is required
- More than 10 years of experience in the subject area
- Bachelor's degree
- Senior industry professional certification such as Certified Information Systems Security Professional (CISSP) or equivalent
- Demonstrated domain expertise and technical or management leadership on major tasks or technology assignments
- Experience establishing goals and plans that meet project objectives and directing activities to ensure technical requirements are met
- Experience interacting with clients, conducting negotiations, and interfacing with senior management
- Must be eligible for employment in the United States
- We are unable to sponsor candidates at this time
- Advanced experience with SIEM query languages, endpoint detection and response, network forensics, cloud logging, identity telemetry, and MITRE ATT&CK
- Experience supporting federal agencies or other highly regulated environments
- Experience developing detection logic, investigation procedures, response playbooks, or security automation
- Advanced certifications such as GCIH, GCFA, GNFA, or equivalent
- Ability to obtain and maintain a High Risk Public Trust suitability determination
Benefits
- Remote work with possible ad hoc on-site needs in Washington, DC.
- Bonus and profit-sharing opportunities, depending on company and employee performance.
- 3 weeks of Personal Leave your first year
- 11 paid Holidays each year
- 5 days of Flexible Time Off each year for approved training or certifications (self-study is ineligible)
- 401(k) company match at 50% up to 10% of your salary
- Medical, Dental and Vision Insurance
- Life and Disability Insurance
- Public Transportation Subsidies
- Certifications and Training Allowance - Up to $5,000/year!
- A great sense of camaraderie at Gunnison.
- The opportunity for individual professional growth with Gunnison is outstanding.
Company Overview