Senior Incident Response Analyst

Our team of talented individuals is what makes us successful. To support our team, we provide a balanced mix of benefits and programs. Your total rewards package includes competitive pay, benefits, and perks, flexible work-life balance, professional development opportunities, and performance and recognition programs. We offer a comprehensive benefits package that includes medical, dental, vision, life, and disability, voluntary benefit programs (critical illness, hospital, and accident), health savings and flexible spending accounts, and retirement 401K plan. One of our fundamental principles is to offer competitive health and welfare benefits to our team members, providing coverage and care for you and your family. Full-time employees working at least 30 hours a week on a regular basis are eligible to participate in our benefits and paid leave programs.  We pride ourselves on our collaborative work environment and culture, which embraces our mission of providing financial and non-financial benefits back to the members of the Seneca Nation.

Seneca Holdings is seeking a Sr. Incident Response Analyst in the Chantilly, VA area. 

Responsibilities include, but are not limited to:

• Analyze alerts and indicators of compromise (IOCs) from SIEM, EDR, and other security tools to assess threat impact
• Lead the identification, containment, eradication, and recovery efforts for cybersecurity incidents across enterprise environments
• Produce detailed incident reports, timelines, and root cause analyses for internal and external stakeholders
• Maintain accurate records of incidents, investigations, and response actions in accordance with regulatory and compliance requirements
• Continuously improve incident response playbooks, workflows, and escalation procedures
• Develop and refine threat detection rules and use cases based on emerging tactics, techniques, and procedures (TTPs) with the Information Security Engineering team
• Conduct all business in accordance with Seneca policies and procedures
• All other duties as assigned

Knowledge and Abilities Required:

• Strong analytical, report writing and communication skills required
• Hands-on expertise with Microsoft Cloud and Endpoint security products
• Deep understanding of network protocols, operating systems (Windows, Mac, Linux) and cloud environments (AWS, Azure, GCP)
• Proficiency in malware analysis and threat hunting techniques
• Familiarity with MTIRE ATTACK framework and NIST incident response guidelines and cyber kill chain methodology

Experience Desired:

• 8+ years of hands-on experience with cybersecurity incident response
• Industry certifications preferred such as: CISSP, CySA+, GCIH, CGFA, SecurityX or equivalent
• Bachelors degree or higher in Cybersecurity, Computer Science, Information Technology or related field preferred but not required

Physical Activities and Requirements 

• Must be able to remain in stationary position for extended periods of time
• Constantly operates a computer and other office productivity machinery
• Requires repetitive motion associated with heavy computer use