#101652 Incident Response Analyst LEAD

Job Description

6 month contract for a Incident Response Analyst LEAD with a leading client in Chicago, IL- MUST BE CURRENTLY LOCAL TO BE CONSIDERED!

Title: Incident Response Analyst LEAD 101652

Location: 100% onsite- Arlington Heights, IL

Type: Contract

• hours: Shifts: 8-4:30, 4:30-12, 12-8:30
• Will they rotate shifts around? Yes
• How often will they rotate? Likely will monthly
• Will send out schedule a month in advance*

Openings: 4

Pay: $61.74/hour on w2- w2 only, exact rate no flex

Length: 6 months with large possibility of extension (ending 1/8/27 as of now)

Screenings: no tech, full 5 panel drug and background (employment+ education+ felony)once hired

IV process: 1 - 2 rounds

+optional benefits, long term contract with ability to extend or convert to full time

Must Haves:

• Bachelor's degree in Computer Science, Cybersecurity, or a related field (or equivalent work experience).
• Min. 3-4 years of experience as a SOC or Incident Response Analyst.
• In-depth knowledge of cybersecurity such as EDR and SIEM , including CrowdStrike and Splunk.
• Strong understanding of cybersecurity concepts, including threat detection, incident response, and malware analysis.
• Knowledge of security frameworks and standards (e.g., NIST, ISO 27001).
• Excellent analytical and problem-solving skills.
• Effective communication skills, both written and verbal.
• Must be able to communicate in English to allow collaboration with global teams.
• Ability to work effectively under pressure and in a fast-paced environment.
• Relevant certifications (e.g., CompTIA Security+, GCIA, GCIH) are a plus.
• Demonstrated ability to manage multiple projects simultaneously, prioritize tasks, and meet deadlines.
• A resourceful person that is a fast learner and asks when in doubt.
• Ability to manage multiple projects simultaneously.
• Naturally organized with determination to deliver excellence.

Role and Responsibilities :

Seeking a highly skilled and experienced Incident Response Analyst, the candidate will play a critical role in detecting, responding to, and mitigating security incidents. The candidate will work alongside a team of skilled professionals to monitor and protect our clients' infrastructure, providing rapid and effective incident response. The candidate’s expertise in cybersecurity, along with experience in SOC and incident response, will be invaluable in maintaining the security posture of our clients.

This role is in support of a 24x7 operation, and candidates will be expected to work assigned shifts outside what would be considered normal working hours.

Key Responsibilities:

• Monitor security alerts and logs to identify and analyze potential security incidents.
• Investigate and triage security alerts, assess their severity, and initiate the incident response process as necessary.
• Conduct in-depth analysis of security incidents, including malware analysis, network traffic analysis, and endpoint forensics.
• Lead or assist in responding to security incidents, coordinating with clients and internal teams to contain, eradicate, and recover from security breaches.
• Maintain detailed incident records, including incident timelines, actions taken, and lessons learned.
• Utilize cybersecurity tools such as CrowdStrike and Splunk to enhance threat detection and incident response capabilities.
• Prepare and deliver incident reports to clients and management, including recommendations for improving security posture.
• Collaborate with cross-functional teams to share threat intelligence and develop proactive security measures.
• Stay updated on the latest cybersecurity threats, trends, and best practices to improve incident response capabilities.
• Provide assistance to IR teams on general triage and threat hunting exercises.
• Gather metrics and report ongoing status (not sure how to word this here, or if you need that )
• Provide guidance and training to junior team members.
• Contribute to the continuous improvement of SOC procedures and documentation
• Experience working in a fast-paced environment with changing priorities