CSOC CIR Tier II AnalystPingWind Inc • Austin, TX, United States

No longer accepting applications

CSOC CIR Tier II Analyst

PingWind Inc • Austin, TX, United States

1 day ago

Job type

Full-time

Job description

Location : On-site in Hines, IL Martinsburg, WV, or Austin, TX

Required Education : Bachelor's degree in computer science, Cybersecurity, Information Technology, or a related field (or equivalent work experience)

Required Experience : 3+ years of experience supporting incident response in an enterprise-level Security Operations Center (SOC)

Required Clearance : Ability to obtain Tier 4 / High Risk Background Investigation

Description

PingWind is seeking a Cyber Incident Response Tier II Analyst to support our VA customer at Hines, IL Martinsburg, WV, or Austin, TX.

Certifications

Must currently have or be willing to obtain one of the following certifications (or equivalent) :

GIAC Certified Incident Handler
EC-Council's Certified Incident Handler (ECIH)
GIAC Certified Incident Handler (GCIH)
Incident Handling & Response Professional (IHRP)
Certified Computer Security Incident Handler (CSIH)
Certified Incident Handling Engineer (CIHE)
EC-Council's Certified Ethical Hacker

Responsibilities

Perform real-time monitoring and triage of security alerts in Cybersecurity toolsets including SIEM, and EDR

Make accurate determination of what alerts are false positives or require further investigation and prioritization

Lead and actively participate in the investigation, analysis, and resolution of cybersecurity incidents. Analyze attack patterns, determine the root cause, and recommend appropriate remediation measures to prevent future occurrences

Ensure accurate and detailed documentation of incident response activities, including analysis, actions taken, and lessons learned. Collaborate with knowledge management teams to maintain up-to-date incident response playbooks

Collaborate effectively with cross-functional teams, including forensics, threat intelligence, IT, and network administrators. Clearly communicate technical information and incident-related updates to management and stakeholders

Identify and action opportunities for tuning alerts to make the incident response team more efficient

Monitor the performance of security analytics and automation processes regularly, identifying areas for improvement and taking proactive measures to enhance their efficacy

Leverage Security Orchestration, Automation, and Response (SOAR) platforms to streamline and automate incident response processes, including enrichment, containment, and remediation actions

Support the mentoring and training of more junior IR staff

Stay informed about the latest cybersecurity threats, trends, and best practices. Actively participate in cybersecurity exercises, drills, and simulations to improve incident response capabilities

Requirements

Work 100% on-site Monday - Friday from 11 : 00 PM to 7 : 00 AM.

A deep understanding of cybersecurity principles, incident response methodologies, and a proactive mindset to ensure our SOC operates effectively in a high-pressure environment

Strong experience with security technologies, including SIEM, IDS / IPS, EDR, and network monitoring tools

Experience with enterprise ticketing systems like ServiceNow

Excellent analytical and problem-solving skills

Ability to work independently and in a team environment to identify errors, pinpoint root causes, and devise solutions with minimal oversight

Ability to learn and function in multiple capacities and learn quickly

Strong verbal and written communication skills

Preferred Qualifications

Ability to investigate Indicators of Compromise (IOCs) using Splunk by correlating logs from multiple sources to detect, trace, and assess threat activity across the enterprise

Experience leveraging Microsoft Defender for Endpoint (MDE) to perform endpoint investigations, analyze process trees, and validate IOCs during active threat scenarios

Ability to remediate phishing incidents, including analysis of email headers, links, and attachments, identifying impacted users, and executing containment actions such as user lockouts, email quarantine, and domain blacklisting

Experience performing root cause analysis of malware leveraging PowerShell, using tools such as MDE advanced hunting (KQL) and Splunk to identify infection paths, attacker behavior, and persistence mechanisms

About PingWind

PingWind is focused on delivering outstanding services to the federal government. We have extensive experience in the fields of cyber security, development, IT infrastructure, supply chain management and other professional services such as system design and continuous improvement. PingWind is a VA CVE certified Service-Disabled Veteran Owned Small Business (SDVOSB) and SBA HUBZone Certified with offices in Washington DC and Northern Virginia. www.PingWind.com

Our benefits include :

Paid Federal Holidays

Robust Health & Dental Insurance Options

401k with matching

Paid vacation and sick leave

Continuing education assistance

Short Term / Long Term Disability & Life Insurance

Employee Assistance Program

through Sun Life Financial EAP Guidance Resources

Veterans are encouraged to apply

PingWind, Inc. does not discriminate in employment opportunities, terms and conditions of employment, or practices on the basis of race, age, gender, religious or political beliefs, national origin or heritage, disability, sexual orientation, or any characteristic protected by law

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Create a job alert for this search

Csoc Cir Tier Ii Analyst • Austin, TX, United States

Related jobs

DevSecOps Engineer - Round Rock, TX

Georgia IT Inc • Round Rock, TX, United States

Full-time

US Citizen, Green Card, GC EAD, and H4 EAD can apply for this role, No third party corp to corp.Candidates that have been previously declined have lacked the following : Security and Programming kno...Show more

Last updated: 30+ days ago • Promoted

Asset Integrity Engineer

Laborintos • Austin, Texas, .US

Full-time

Quick Apply

Contamos con un equipo sólido y robusto de consultores especializados en búsqueda y selección de personal, así como en consultoría en diversos temas asociado al Talento Humano en múltiples sectores...Show more

Last updated: 30+ days ago

DEVSECOPS & AGILE

TechDigital Corporation • Austin, TX, United States

Full-time

DevSecOps Engineer Key Responsibilities : .Understand tool chains, build and deployment environment.Co-work with cross functional team, deliver and support required tool chain.Setting up CI / CD pipe...Show more

Last updated: 1 day ago • Promoted

DevSecOps Engineers

eTeam • Austin, TX, United States

Full-time

Devsecops Engineer Mid-Level Consultant.Location : Austin, TX Houston, TX Minneapolis, MN St.Job Summary : We are looking for a skilled DevSecOps Engineer (Consultant - Mid-Level) to help design, imp...Show more

Last updated: 1 day ago • Promoted

Senior Security Architect

TradeJobsWorkForce • 78749 Austin, TX, US

Full-time

Senior Security Architect Job Duties : Enhances security team accomplishments and competence by planning deliver...Show more

Last updated: 30+ days ago • Promoted

Cyber Security

TradeJobsWorkForce • 78732 Austin, TX, US

Full-time

Cyber Security Job Duties : Safeguards information system assets by identifying and solvin...Show more

Last updated: 30+ days ago • Promoted

DevSecOps Engineer - Round Rock, TX

Staffing the Universe • Round Rock, TX, United States

Full-time

Position DevSecOps Engineer Location Round Rock, TX Plus years contract Rate DOE US Citizen, Green Card, GC EAD, and H4 EAD can apply for this role, No third party corp to corp.Candidates that have...Show more

Last updated: 1 day ago • Promoted

DevSecOps System Analyst

Atika Technologies • Austin, TX, United States

Full-time

Austin, TX (candidate must reside in Texas or willing to relocate to Austin).JOB DESCRIPTION / MINIMUM REQUIREMENTS : .Supports TIERS (Texas Integrated Eligibility Redesign System) Operations, AWS Clou...Show more

Last updated: 1 day ago • Promoted

NOC Analyst

Plume • Austin, TX, US

Full-time

At Plume, we believe that technology isn't about moving faster, it's about making life's moments better.Which is why we've built the world's first, and only, open and hardware-i...Show more

Last updated: 26 days ago • Promoted

Cyber Warfare Technician

U.S. Navy • Manchaca, TX, US

Full-time +1

To be eligible to enlist in the U.Navy, candidates must be between the ages of 18-34.As a Cryptologic Technician, you are one of the worlds greatest problem-solvers. Were looking for people with sha...Show more

Last updated: 23 hours ago • Promoted

CSOC CIR Tier II Analyst

PingWind • Austin, Texas, United States, 78701

Full-time

On-site in Hines, IL Martinsburg, WV, or Austin, TX.Bachelor's degree in computer science, Cybersecurity, Information Technology, or a related field (or equivalent work experience).Security Operati...Show more

Last updated: 30+ days ago

Senior Backup Engineer

KPMG • Austin, TX, United States

Full-time

Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today's most important industries. Our growth is driven by delivering re...Show more

Last updated: 1 day ago • Promoted

Senior Malware Analyst (Android)

SERVISS LLC • Austin, TX, US

Full-time

Quick Apply

Position Summary SERVISS is seeking a talented, diligent, and energetic Senior Malware Analyst / Reverses Engineer with deep expertise in Android application security to support a high-profile enga...Show more

Last updated: 30+ days ago

Regional HSEQ Lead [JK-14498]

Shirley Parsons • Austin, Texas Metropolitan Area, United States

Full-time

Can be based in Houston, Austin, or Dallas, TX (3 days onsite).A leading engineering consulting firm is looking to appoint a Regional HSEQ Leader in Houston, Austin, or Dallas, TX.Working with cros...Show more

Last updated: 17 hours ago • Promoted • New!

Cybersecurity Engineer - GRC

Visa • Austin, TX, United States

Full-time

Visa is a world leader in payments and technology, with over 259 billion payments transactions flowing safely between consumers, merchants, financial institutions, and government entities in more t...Show more

Last updated: 30+ days ago • Promoted

Cyber Warfare Technician

Navy • Lost Pines, TX, United States

Full-time

ABOUT Enlisted Sailors in the Navy Cryptology community analyze encrypted electronic communications, jam enemy radar signals, decipher information in foreign languages, and maintain state-of-the-ar...Show more

Last updated: 30+ days ago • Promoted

Analog / Mixed-Signal IC Verification Engineer

Omni Design Technologies • Austin, TX, US

Full-time

Analog / Mixed-Signal Verification Engineer focusing on high-performance analog-to-digital and digital-to-analog converters. Job responsibilities include the verification of analog and mixed-signal de...Show more

Last updated: 17 days ago • Promoted

QA Analyst - Remote

TradeJobsWorkForce • 78735 Austin, TX, US

Remote

Full-time

QA Analyst Remote Job Duties : • Partner with the product and engineering team to understand project o...Show more

Last updated: 30+ days ago • Promoted