CSIRT Analyst

Evolver is a cybersecurity and digital transformation company supporting national defense, federal civilian agencies, and Fortune 500 organizations. We help customers secure critical systems, modernize enterprise technology, and solve complex operational challenges through integrated capabilities spanning cybersecurity, enterprise IT infrastructure, cloud, software development, data analytics, legal technology and eDiscovery, applied AI, and electronic security systems. Our teams combine deep technical expertise with mission understanding to deliver secure, reliable, and scalable solutions that advance performance in high-stakes environments.

Evolver is seeking a CSIRT Analyst to join our team supporting our federal customer located at Stennis Space Center, MS. CSIRT is the primary entity of the SOC and the heart of Incident Response Operations. They are responsible for monitoring, incident recording, and reporting of cyber security events or incidents. The goal of CSIRT is to minimize and control the damage resulting from cybersecurity events or incidents, provide effective guidance for response, coordinate recovery activities, and work to prevent future incidents from occurring.

Additionally, they provide coverage to ensure a proactive approach to defending against email attacks and a reactive approach when responding to successful attacks.

• Monitor security alerts and events to identify potential cyber security incidents.
• Conduct initial triage and analysis of security events to determine their severity and potential impact.
• Investigate and respond to security incidents in accordance with established procedures and protocols.
• Collaborate with cross-functional teams to contain and remediate security incidents, minimizing their impact on operations.
• Document incident details, including analysis findings, actions taken, and recommendations for improvement.
• Provide timely updates and reports on incident status to stakeholders, including management and technical teams.
• Participate in incident response exercises and tabletop exercises to enhance preparedness and response capabilities.
• Stay abreast of emerging threats and vulnerabilities, sharing insights and recommendations with the broader team.
• Continuously improve incident detection and response processes through automation, tooling, and knowledge sharing.

• Must be a US Citizen able to obtain an Agency-specific clearance prior to starting.
• Must also be able to obtain a DoD Top Secret Clearance (this can be done while working on the program).
• Must have at least one active certification to include:
  Security+CE, ISC2 CISSP or other comparable certification approved on a case by case basis.
• Bachelor's Degree and a minimum of 1 year of applicable experience is required. 4 years of additional applicable experience may substitute for a degree.

• Familiarity with security technologies and tools, including SIEM platforms, intrusion detection/prevention systems, and endpoint security solutions.
• Strong analytical and problem-solving skills, with the ability to analyze and interpret security event data.
• Excellent communication and interpersonal skills, with the ability to effectively communicate technical information to non-technical stakeholders.
• Ability to work effectively in a fast-paced environment, managing multiple priorities and deadlines.
• Current Active DOD Top Secret Clearance.

Evolver is an equal opportunity employer and welcomes all job seekers. It is the policy of Evolver not to discriminate based on race, color, ancestry, religion, gender, age, national origin, gender identity or expression, sexual orientation, genetic factors, pregnancy, physical or mental disability, military/veteran status, or any other factor protected by law.

Actual salary will depend on factors such as skills, qualifications, experience, market and work location. Evolver offers competitive benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies.