Security Alert Triage

Security Alert Triage Cybersecurity Jobs

2 jobs found

Today

Cybersecurity Incident Response Triage Analyst

Accenture Federal Services Arlington, VA

Arlington, VA

Today

$57k - $109k/yr Full time Cybersecurity Tools Incident Response Information Security

Apply Now

Job Description

Accenture Federal Services is hiring a Cybersecurity Incident Response Triage Analyst to support the CIRT team within the CISO organization. This onsite role in Arlington, VA works shifts to relate, scope, and triage alerts and notifications, helping turn security signals into clear investigation paths.

In this position, you will contribute to incident monitoring and response, investigate and document findings, coordinate with other Cybersecurity Incident Response Teams, and stay current on threats. If you enjoy incident-driven work and clear, detailed reporting, this role supports hands-on investigation across enterprise security environments.

Responsibilities

Actively monitor and respond to cybersecurity incidents tied to alerted policy violations
Analyze and investigate incidents to determine nature and scope
Coordinate with the lead and other Cybersecurity Incident Response Teams to support effective incident resolution
Document incidents and response activities in detail
Stay updated on the latest cybersecurity threats and trends
Assist in developing and refining incident response strategies and procedures
Collaborate with operations teams, legal, human resources, and management to investigate security issues and interview investigation subjects to determine true and false positives

Requirements

US Citizenship required
1 - 2 years of experience in information security, or other equivalent combination of education or equivalent work experience
1-year of experience performing event and log analysis, including one or more of: Anti-Virus, Intrusion Detection Systems, Firewalls, Active Directory, Web Proxies, Data loss prevention tools, and other security tools found in large enterprise network environments; plus experience working with Security Information and Event Management (SIEM) solutions
Excellent written and oral communication skills, attention to detail, and interpersonal skills
Familiarity with network and host-based security applications and tools, including network/host assessment or scanning tools and network/host-based intrusion detection systems
Familiarity with TCP/IP, common application layer protocols, and packet analysis
Familiarity with static and dynamic malware analysis concepts
Experience with indicators of attack and compromise
Familiarity with Windows / Linux architecture and endpoint analysis
Familiarity with basic data parsing and analysis tools, including Excel, grep, sed, awk, regex, etc.

Technologies

Security Information and Event Management (SIEM)
Anti-Virus, Intrusion Detection Systems, Firewalls
Active Directory, Web Proxies, Data loss prevention tools
Network and host assessment/scanning tools, network and host-based intrusion detection systems
TCP/IP, packet analysis
Static malware analysis, dynamic malware analysis
Windows, Linux, endpoint analysis
Excel, grep, sed, awk, regex

Bonus if you have

SANS GIAC Certifications including but not limited to GCED, GCLD, GCIH, GCFA, GREM

Compensation: USD 57,200 - 109,400 per year. Experience: 1 years. Location: Arlington, VA (onsite).

View full job page →

Today

IT Security Analyst I

Patrick Industries, Inc Elkhart, IN

Elkhart, IN

Today

Full time Cybersecurity Tools Detection Rules Endpoint Security

Apply Now

Job Description

Join the Security Operations Center to monitor, detect, and respond to security events across enterprise IT and OT/ICS environments in a manufacturing setting.

Monitor security alerts and events using SIEM and other security tools across enterprise IT and OT/ICS networks
Triage and analyze alerts to identify potential security incidents, including impacts to production, plant floor systems, and industrial control systems
Escalate confirmed incidents to Level 2/3 analysts, incident response teams, or OT engineering staff as appropriate
Document findings, actions taken, and incident details in ticketing systems
Assist in creating and tuning detection rules and security use cases, including those tailored to ICS/SCADA protocols and behaviors
Follow SOPs for incident handling and escalation, including OT-specific procedures that account for safety and uptime needs
Stay current on emerging threats and vulnerabilities affecting both IT and OT environments
Administer and monitor web and email security controls to reduce risk from phishing, malware, spam, malicious websites, and other cyber threats

Requirements

Associate's degree in Cybersecurity, Information Technology, or related field or equivalent experience
3+ years of IT Cybersecurity experience
Basic understanding of networking concepts: TCP/IP, DNS, firewalls
Familiarity with security tools: SIEM, XDR, IDS/IPS, endpoint protection
Strong analytical and problem-solving skills
Excellent written and verbal communication skills
Align with Patrick Industries “BETTER Together” mentality: Balance, Excellence, Trust, Teamwork, Empowerment, Respect

Technologies

SIEM, XDR, IDS/IPS, endpoint protection
Splunk, Logscale, Sentinel
MITRE ATT&CK framework, ATT&CK for ICS matrix
Python, PowerShell
Azure, AWS, GCP
Purdue Model (ICS network segmentation and IT/OT convergence)
Industrial protocols and environments: Modbus, DNP3, OPC-UA, EtherNet/IP
OT monitoring/security platforms: Claroty, Dragos, Nozomi Networks, Tenable.ot
Standards/training: ISA/IEC 62443 Cybersecurity Fundamentals Specialist, GICSP (Global Industrial Cyber Security Professional), SANS ICS410/ICS515

Preferred Qualifications

Security certifications such as CompTIA Security+, CySA+, or equivalent
Experience with Splunk, Logscale, or Sentinel
Knowledge of MITRE ATT&CK, including the ATT&CK for ICS matrix
Exposure to scripting or automation (Python, PowerShell)
Experience securing cloud environments (Azure, AWS, GCP)
Experience or coursework in OT/ICS security, especially in manufacturing environments
Familiarity with the Purdue Model for ICS network segmentation and IT/OT convergence
Understanding industrial protocols such as Modbus, DNP3, OPC-UA, or EtherNet/IP
Exposure to OT monitoring platforms: Claroty, Dragos, Nozomi Networks, Tenable.ot
Industrial/OT security certifications including GICSP, ISA/IEC 62443 Cybersecurity Fundamentals Specialist, or SANS ICS410/ICS515 coursework
Awareness of safety-first incident response practices unique to production and manufacturing environments

Location: Elkhart, IN (onsite)

View full job page →

Security Alert Triage Cybersecurity Jobs

Cybersecurity Incident Response Triage Analyst

IT Security Analyst I

Get Security Alert Triage Cybersecurity Jobs alerts