Cybersecurity Incident Response Analyst / Engineer (multiple levels)

About the Opportunity

Judit Inc. is recruiting cybersecurity professionals for an anticipated federal contract supporting a 24x7 security operations and incident response center. The team will detect, analyze and respond to cyber threats against federal systems and the sensitive data they protect. These positions are contingent upon contract award.

We especially welcome candidates with federal civilian agency experience, including former IRS and Department of the Treasury employees and contractor staff. Experience with federal security policy, background investigations and agency onboarding helps new team members get up to speed quickly.

Judit Inc. is a certified Women-Owned Business Enterprise and GSA Schedule holder providing staffing to government and commercial clients. Learn more at www.juditinc.com.

Open Positions

Senior Technical Lead

• Technical direction for security operations at both sites; primary technical point of contact for the government
• 12+ years in cybersecurity, 5+ leading SOC or incident response teams

Cyber Security Subject Matter Expert III

• Complex incident handling, threat hunting, forensics, and senior-level analysis and reporting
• 10+ years in cybersecurity, incident response or digital forensics

Engineer III

• Design, tuning and integration of SIEM, IDS/IPS, EDR and other security tools
• 8+ years in security engineering

Engineer II

• Deployment, configuration and maintenance of security tools and data feeds
• 5+ years in security or systems engineering

Administrator III

• Administration of security systems, accounts, platforms and supporting infrastructure
• 7+ years in systems or security administration

Cybersecurity Monitoring Analyst

• 24x7 event monitoring, triage, escalation and first-response actions
• 3+ years in SOC or security monitoring

Pay within each range depends on experience, qualifications, clearance level and work location.

Key Responsibilities

Responsibilities vary by position and level.

• Monitor, detect and analyze security events across enterprise networks, systems and applications on a 24x7x365 basis.
• Triage, investigate, contain and remediate cybersecurity incidents, and escalate according to established incident response procedures.
• Conduct threat hunting, malware analysis, log analysis and digital forensics to determine root cause and scope.
• Engineer, tune and maintain security tools, including SIEM, IDS/IPS, endpoint detection and response, and network monitoring platforms.
• Prepare incident reports, recurring operational reports and other deliverables on schedule.
• Coordinate with agency stakeholders and federal cybersecurity partners as directed.
• Support after-hours, on-call and onsite response as assigned.
• Follow agency security policy, NIST guidance and all requirements for safeguarding sensitive and classified information.

Required Qualifications

• U.S. citizenship, as required by the government contract.
• The years of experience listed for the position under Open Positions.
• Bachelor's degree in cybersecurity, computer science, information technology or a related field; additional relevant experience may substitute for a degree.
• Hands-on experience in security operations, incident response, security engineering or systems administration in a large enterprise or federal environment.
• Working knowledge of NIST SP 800-53 and SP 800-61, FISMA and federal incident reporting requirements.
• Ability to obtain and maintain the government background investigation and the clearance level designated for the position.
• Ability to work onsite in secure government facilities and to support shift, on-call and after-hours coverage.
• Strong written communication skills for incident reports and recurring deliverables.

Preferred Qualifications

Federal experience

• Current or former federal employment, or federal contractor experience, especially with the IRS or the Department of the Treasury.
• Experience in federal cybersecurity, security operations or enterprise IT operations.
• A current or prior federal background investigation (MBI or higher), or an active Secret or Top Secret clearance.
• Familiarity with federal security frameworks, the Internal Revenue Manual (IRM) security provisions, and federal onboarding processes.

Technical

• Certifications such as CISSP, CISM, GIAC (GCIH, GCIA, GCFA), CEH, CompTIA CySA+ or Security+.
• Experience with SIEM platforms such as Splunk, EDR tools, packet capture and forensic toolkits.
• Prior SOC or CSIRT experience in a 24x7, multi-site environment.

Security and Eligibility

• U.S. citizenship is required for all positions under the terms of the government contract.
• All staff must complete and maintain a government background investigation at the level designated for the position.
• Positions with access to classified information require a Secret or Top Secret clearance, as designated by the government.
• Final employment depends on contract award and on the government's suitability and access determinations.

Notice to current and former federal employees

• Current federal employees are responsible for following all federal ethics, conflict-of-interest and post-employment rules, including any required notice to or approval from their agency ethics official before seeking or accepting employment.
• Do not share nonpublic government, procurement or source-selection information with Judit Inc. at any stage. Judit Inc. will never request it.

How to Apply

Apply through www.juditinc.com with your current resume. To speed review, include:

1. The position or positions you are applying for.
2. Your relevant federal employment or federal contractor experience and dates, if applicable.
3. Your current or most recent investigation or clearance level and the granting agency, if applicable.
4. Your preferred location: Lanham, MD; Memphis, TN; or either.
5. Your availability to start and your shift preferences.

Qualified candidates will be contacted for next steps.