About the Role
The Federal Reserve System (FRS) National Incident Response Team (NIRT) is seeking an Incident Response Analyst to investigate and respond to security events within the FRS with minimal oversight. The NIRT provides intrusion detection, incident response, forensics, security intelligence, threat assessment, and penetration testing services.
Responsibilities
- Perform security event triage and analysis with knowledge in current security threats and techniques.
- Analyze a large volume of security event data from multiple sources to identify suspicious and malicious activity.
- Perform postmortem analysis of traffic flows.
- Conduct network forensics.
- Conduct follow up analysis throughout the incident life cycle.
- Complete projects and tasks associated with security monitoring, detection, and incident response.
- Analyze all relevant data sources for attack indicators and potential network and host compromises.
- Respond to different attack vectors such as data exfiltration, DDoS, malware, insider risk, and phishing.
- Develop scripts and tools to improve the efficiency of incident detection and response processes.
- Interface with NIRT customers and stakeholders.
Requirements
- Bachelor's Degree or equivalent experience with 3+ years of relevant work experience.
- In-depth understanding of a variety of information technologies and information security topics.
- SIEM/SOAR utilization skills to analyze security events from multiple monitoring and logging sources to identify, investigate and confirm suspicious activity.
- Knowledge of incident response and handling methodologies.
- Knowledge of common adversary tactics, techniques, and procedures (TTPs).
- Knowledge of cyber threats and vulnerabilities.
- Knowledge of cyber-attack stages (e.g., reconnaissance, scanning, enumeration, gaining access, escalation of privileges, maintaining access, network exploitation, covering tracks).
- Knowledge of which system files (e.g., log files, registry files, configuration files) contain relevant information and where to find those system files).
- Knowledge to analyze all relevant data sources for attack indicators and potential network and host compromises.
- Knowledge of current security threats, techniques, and landscape, and a dedicated approach to research current information security landscape.
- Understanding of IT Infrastructure designs, technologies, products, and services.
- Ability to communicate complex information, concepts, or ideas in a confident and well-organized manner through verbal, written, and/or visual means.
- Ability to evaluate information for reliability, validity, and relevance.
- Ability to function effectively in a dynamic, fast-paced environment.
- Ability to function in a collaborative environment, seeking continuous consultation with other analysts and experts—both internal and external to the organization—to leverage analytical and technical expertise.
- Ability to think critically and think like threat actors.
- Ability to develop productive working relationships with a broad range of business and operational area professionals.
- United States citizenship is required.
- Must be currently authorized to work in the United States without the need for visa sponsorship now or in the future.
Skills
- Security Operations Center (SOC) support
- Disk forensics
- Memory forensics
- Phone forensics
- Malware analysis
- Threat hunting
- Networking protocols
- Firewall functionality
- Host and network intrusion detection systems
- Operating systems
- Databases
- Encryption
- Load balancing
Location
- Boston, MA
- New York, NY
- Philadelphia, PA
- Cleveland, OH
- Richmond, VA
- Atlanta, GA
- Chicago, IL
- St. Louis, MO
- Minneapolis, MN
- Kansas City, MO
- Dallas, TX
- San Francisco, CA
- Remote (within commutable distance to a Federal Reserve Bank location)
Work Type
- Full-time
- Regular
- Remote
- Night shift (8:00pm - 8:00am ET, three consecutive 12-hour shifts)
Experience Level
- 3+ years of relevant work experience
Education Level
- Bachelor's Degree or equivalent experience
- Relevant security certifications/degrees
Benefits
- Shift differential for 3rd shift work
About the Company
- The Federal Reserve System (FRS) is the nation's central bank.
- We collaborate with leading tech professionals to strengthen and protect our economic, financial and payments systems.
- We invest in contemporary and emerging technology each year to support the Federal Reserve and our economy.
- We are building a dynamic team for our future.
Equal Opportunity
- The Federal Reserve Banks are committed to equal employment opportunity for employees and job applicants in compliance with applicable law and to an environment where employees are valued for their differences.
