ZipRecruiter

Log In

ARSIEM
ARSIEM

60 Arsiem Incident Response Analyst Jobs Hiring Near You

ARSIEM

Incident Response Expert IV

Arlington, VA · On-site

ARSIEM is looking for a Cyber Eviction Analyst to support on-site incident response to civilian Government agencies and critical asset owners who experience cyber attacks, providing immediate ...

ARSIEM

Incident Response Expert III

Arlington, VA · On-site

ARSIEM is looking for a Cyber Eviction Analyst to support on-site incident response to civilian Government agencies and critical asset owners who experience cyber attacks, providing immediate ...

ARSIEM

Incident Response Expert IV

Arlington, VA

ARSIEM is looking for a Cyber Eviction Analyst to support on-site incident response to civilian Government agencies and critical asset owners who experience cyber attacks, providing immediate ...

ARSIEM

Incident Response Expert III

Arlington, VA

ARSIEM is looking for a Cyber Eviction Analyst to support on-site incident response to civilian Government agencies and critical asset owners who experience cyber attacks, providing immediate ...

ARSIEM

Incident Response Expert IV

Arlington, VA · On-site

ARSIEM is looking for a Cyber Eviction Analyst to support on-site incident response to civilian Government agencies and critical asset owners who experience cyber attacks, providing immediate ...

ARSIEM

Incident Response Expert III

Arlington, VA · On-site

ARSIEM is looking for a Cyber Eviction Analyst to support on-site incident response to civilian Government agencies and critical asset owners who experience cyber attacks, providing immediate ...

ARSIEM

Incident Manager II

Arlington, VA · On-site

ARSIEM has an experienced workforce of qualified professionals committed to providing the best ... analyzing resumes, or assessing responses. These tools assist our recruitment team but do not ...

ARSIEM

Incident Manager II

Arlington, VA

ARSIEM has an experienced workforce of qualified professionals committed to providing the best ... analyzing resumes, or assessing responses. These tools assist our recruitment team but do not ...

ARSIEM

Incident Manager II

Arlington, VA · On-site

ARSIEM has an experienced workforce of qualified professionals committed to providing the best ... analyzing resumes, or assessing responses. These tools assist our recruitment team but do not ...

ARSIEM Corporation

Incident Manager II

Arlington, VA · On-site

ARSIEM has an experienced workforce of qualified professionals committed to providing the best ... Receiving and analyzing network alerts from various sources within the enterprise and determining ...

ARSIEM

Incident Manager III

Arlington, VA · On-site

ARSIEM has an experienced workforce of qualified professionals committed to providing the best ... analyzing resumes, or assessing responses. These tools assist our recruitment team but do not ...

ARSIEM

Incident Manager III

Arlington, VA · On-site

ARSIEM has an experienced workforce of qualified professionals committed to providing the best ... analyzing resumes, or assessing responses. These tools assist our recruitment team but do not ...

ARSIEM

Incident Manager III

Arlington, VA

ARSIEM is looking for a Cyber Incident Manager to support on-site incident response to civilian ... Receiving and analyzing network alerts from various sources within the enterprise and determine ...

ARSIEM

Incident Manager III

Arlington, VA · On-site

ARSIEM is looking for a Cyber Incident Manager to support on-site incident response to civilian ... Receiving and analyzing network alerts from various sources within the enterprise and determine ...

ARSIEM

Incident Manager III

Arlington, VA

ARSIEM has an experienced workforce of qualified professionals committed to providing the best ... analyzing resumes, or assessing responses. These tools assist our recruitment team but do not ...

next page

Showing results 1-20

All JobsArsiem JobsArsiem Incident Response Analyst Jobs

ARSIEM Jobs Information

What are the key skills and qualifications needed to thrive as an Incident Response Analyst, and why are they important?

To thrive as an Incident Response Analyst, you need a solid understanding of cybersecurity principles, threat analysis, and incident handling, often supported by a degree in information security or related fields. Familiarity with security information and event management (SIEM) tools, forensic software, and certifications like GIAC or CISSP is typically required. Strong analytical thinking, attention to detail, and effective communication are crucial soft skills for coordinating response efforts and reporting findings. These skills ensure rapid detection, containment, and resolution of security incidents, protecting organizational assets and reputation.

What types of incidents does an Incident Response Analyst typically handle, and how do they prioritize them?

Incident Response Analysts commonly handle a variety of security incidents, including malware infections, phishing attacks, unauthorized access attempts, and data breaches. They prioritize incidents based on factors such as potential business impact, severity, and the sensitivity of affected data. Analysts often use established frameworks and playbooks to assess and triage incidents, ensuring the most critical threats are addressed first. Collaboration with IT, security teams, and sometimes legal or compliance departments is key to effective resolution and minimizing risk.

What does an Incident Response Analyst do?

An Incident Response Analyst is responsible for identifying, investigating, and responding to cybersecurity incidents within an organization. They monitor networks and systems for security breaches, analyze potential threats, and take action to contain and mitigate any attacks. In addition, they document findings, coordinate with other IT and security teams, and help improve the organization's overall security posture by recommending preventative measures. Their role is critical in minimizing damage from cyber incidents and ensuring business continuity.

What is the difference between Incident Response Analyst vs Security Analyst?

AspectIncident Response AnalystSecurity Analyst
CertificationsCompTIA Security+, GIAC certifications, CISSP (preferred)CompTIA Security+, CISSP, CEH (sometimes)
Work EnvironmentPrimarily in cybersecurity teams, focused on incident handling and responseBroader security operations, including monitoring, analysis, and policy enforcement
Employer & Industry UsageTech companies, government agencies, cybersecurity firmsFinancial institutions, healthcare, government, and corporate sectors

Incident Response Analysts specialize in identifying, managing, and mitigating cybersecurity incidents, while Security Analysts have a broader role in monitoring security systems, analyzing threats, and implementing security measures. Both roles require similar certifications and often work within the same organizations, but Incident Response Analysts focus more on reactive incident handling, whereas Security Analysts cover proactive security measures.

What other companies are hiring for Incident Response Analyst jobs?
What are the most popular jobs at Arsiem?
What are the most popular categories at Arsiem?
Infographic showing various Incident Response Analyst job openings at Arsiem in the United States as of May 2026, with employment types broken down into 2% Internship, 96% Full Time, and 2% Part Time. Highlights an 98% Physical, and 2% Remote job distribution.
Incident Response Expert IV

Incident Response Expert IV

ARSIEM

Arlington, VA • On-site

Full-time

Posted 25 days ago

Job description

About ARSIEM Corporation
At ARSIEM Corporation we are committed to fostering a proven and trusted partnership with our government clients. We provide support to multiple agencies across the United States Government. ARSIEM has an experienced workforce of qualified professionals committed to providing the best possible support.
As demand increases, ARSIEM continues to provide reliable and cutting-edge technical solutions at the best value to our clients. That means a career packed with opportunities to grow and the ability to have an impact on every client you work with.
ARSIEM is looking for a Cyber Eviction Analystto support on-site incident response to civilian Government agencies and critical asset owners who experience cyber attacks, providing immediate investigation and resolution. This position will support one of our Government clients in Arlington, VA.
Responsibilities
  • Serves as hunt and incident response subject matter expert (SME), applying in-depth knowledge on threat actor (TA) tools, techniques, and procedures (TTPs)
  • Distills analytic findings into executive summaries and in-depth technical reports
  • Provide expert support, analysis, and research with only broad direction into exceptionally complex problems and processes relating to the subject matter as it relates to hunt and incident response activities
  • Serves as technical expert on high-level incident response teams providing technical direction, interpretation, and alternatives
  • Exercises considerable latitude in determining technical objectives of an assignment or task at hand
  • Independently develops technical solutions to complex problems that require the regular use of ingenuity and creativity
  • Analyzes incident data and victim environments to recommend targeted mitigations
  • Advise technical personnel on countermeasure implementation and customization
  • Supports internal stakeholders on containment and eradication missions
  • Documents analysis in a standardized knowledgebase for sharing and publication
  • Assists in maintaining branch process and procedure documentation
  • Guides the completion of hunt and incident response activities

Minimum Qualifications
  • BS Computer Science, Cyber Security, Computer Engineering, or related degree; or HS Diploma & 10+ years of technical experience in the area of expertise.
  • 8+ years of directly relevant experience in the area of expertise
  • Must be able to travel domestically on short notice
  • Strong understanding of network architecture/security
  • Experience performing cyber incident response
  • Ability to think independently
  • Demonstrates superior written and oral communication skills
  • Must be able to work collaboratively across physical locations
  • Skilled in identifying different classes of attacks and attack stages
  • Understanding of system and application security threats and vulnerabilities
  • Understanding of proactive analysis of systems and networks, to include creating trust levels of critical resources
  • Proficiency with common operating systems (e,g, Linux/Unix, Windows)

Preferred Qualifications
  • Experience leading and mentoring technical teams
  • Knowledge of Computer Network Defense policies, procedures and regulations
  • Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non nation-state sponsored], and third generation [nation-state sponsored])
  • Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, returnoriented attacks, and malicious code)
  • Network and System administration experience
  • Strong understanding of adversarial tactics/techniques/procedures (TTPs)
  • Experience with Identity and Access Management (IAM) tools
  • Ability to review and analyze Enterprise Architecture (EA) from a security perspective
  • Understanding of cyber defense-in-depth principles
  • Hands-on skill in host/network intrusion detection
  • Ability to perform event correlation
  • Experience with malicious activity analysis
  • Ability to collaborate with stakeholders at multiple levels within an organization
  • Desired Certifications: One or more
    DoD 8140.01 IAT Level II, IASAE II, CSSP Analyst
    DoD 8140.01 GCIA, GCIH, CSSP Analyst/CSSP Incident Responder
    DoD 8140.01 CEH, CSSP Analyst
  • SANS GIAC GNFA preferred
  • SANS GRID, GICSP, or GCIP a plus

Clearance Requirement: This position requires an Active TS/SCI clearance and the ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) Suitability.
Candidate Referral: Do you know someone who would be GREAT at this role? If you do, ARSIEM has a way for you to earn a bonus through our referral program for persons presenting NEW (not in our resume database) candidates who are successfully placed on one of our projects. The bonus for this position is $3,500, and the referrer is eligible to receive the sum for any applicant we place within 12 months of referral. The bonus is paid after the referred employee reaches 6 months of employment.
ARSIEM is proud to be an Equal Opportunity and Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status, age, or any other federally protected class.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Apply