Job Description

The Incident Response Analyst is responsible for detecting, analyzing, investigating, and responding to cybersecurity incidents within NIWC CSSP environments. This role plays a critical role in network defense, digital forensics, threat analysis, and remediation efforts to ensure the integrity and security of DoD information systems. The analyst will work alongside SOC teams, forensic investigators, and cyber threat intelligence analysts to assess security events and mitigate cyber threats in a timely manner. Key Responsibilities include monitoring security alerts and system logs from SIEM tools, IDS/IPS, firewalls, and endpoint security solutions to detect potential security incidents; analyzing network traffic, system logs, and endpoint behaviors to identify indicators of compromise (IoCs) and signs of malicious activity; triaging and investigating security incidents, ensuring proper categorization and impact assessment; performing forensic analysis on compromised systems, examining artifacts, log files, and malware to determine attack vectors; responding to active cybersecurity threats, including ransomware, phishing, insider threats, and advanced persistent threats (APTs); coordinating with USCYBERCOM, NIWC CSSP teams, and other DoD entities to ensure accurate reporting and response to cybersecurity incidents; developing and implementing security countermeasures to mitigate threats and prevent future attacks; ensuring proper documentation of security events and incidents in accordance with DoD policies and CJCSM 6510.01B; creating detailed incident reports, root cause analysis (RCA), and lessons learned documentation for executive leadership and cybersecurity stakeholders; maintaining and updating incident response SOPs to align with evolving cybersecurity threats and best practices; providing 24/7 support for critical security incidents as part of an on-call rotation; conducting threat hunting activities to proactively identify security vulnerabilities and adversary activity; collaborating with vulnerability management teams to prioritize remediation of exploited weaknesses; and training and mentoring junior analysts in incident response methodologies and best practices. Qualifications vary by level, requiring different education, experience, clearance, and certification requirements. Benefits include competitive lifestyle benefits such as 401K plan with company match, medical, dental, vision, life insurance, AD&D, flexible spending account, disability, paid time off, and flexible work schedule. KBR supports career advancement through professional training and development and is an equal opportunity employer.

By applying, you consent to your information being transmitted by Jooble to the Employer, as data controller, through the Employer’s data processor SonicJobs.
See kbr Privacy Policy at and SonicJobs Privacy Policy at and Terms of Use at

Job Tags

Similar Jobs