Description of Task to be Performed:    

AnaVation is seeking an Incident Response/Security Analyst (Temporary Role) to help our mission-critical customer in Washington, DC.

Responsibilities:

• Create, track, monitor and investigate security related events/incidents through closure.
• Monitor, maintain and administer policies and rules within EDR and SIEM tools (e.g., Crowdstrike, Splunk).
• Participate in or lead the remediation of incidents and responses that are generated from live threats against the enterprise.
• Perform incident response analysis based on investigation requirements.
• Support and develop reports during and after incidents, which include all actions taken to properly mitigate, recover and return operations to normal operations.
• Assist in developing and implementing defensive cyber best practice tactics, techniques, and procedures.
• Assist in conducting vulnerability scans using Tenable SC and Nessus Manager.  Manage the applications and conduct vulnerability analysis.
• Maintain Incident Ticketing tracking system and related tickets within Remedy.
• Monitor and take action within multiple tools providing security functions such as vulnerability management (e.g., Nessus), configuration management (e.g., Tenable Security Center, IBM BigFix, SCCM, McAfee ePO), endpoint protection (e.g., antivirus, ATP), intrusion detection software and hardware.
• Perform Splunk queries to examine and query log data from the Enterprise Logging as a Service system.
• Interacting with GRC tool (e.g., CSAM) to perform daily/weekly vulnerability analysis.
• Creating and compiling weekly security metrics into dashboards and charts.
• Flexible with other security related tasks as needed by the customer.
• This position is on-site in Washington, DC.