CARE Alert Monitoring Analyst @ CGI

Summary

Job TitleAnalysts are core members of the CARE Watch security team, providing EDR subject matter expertise. They are responsible for interpreting alerts, recommending remediation steps, and assisting with response and recovery activities when appropriate.Key responsibilities include:Investigate incidents to determine impact, threat mechanisms, and associated tactics, techniques, and procedures (TTPs).Own the response and remediation actions for each alert.Clearly communicate alert details and CARE recommendations to technical and management stakeholders.Develop appropriate response actions and guide agencies through incident response.Create remediation plans and document them in playbooks.Develop response and remediation templates.Collaborate with a TIA to produce Tech Notes and Agency Advisories.Provide EDR subject matter expertise for effective implementations.Assist with response and recovery efforts as needed.Document lessons learned and best practices and review with CARE Directors.Validate alerts for accurate true-positive determination.Pivot to Max support with appropriate detail.Support CARE Directors in advancing the CARE mission and vision.Support CISA and CETH as required.Required qualifications to be successful in this role:Due to the nature of the government contract requirements and/or clearance requirements, US citizenship is required as well as successful passing of CGI background check prior to beginning work. In addition, candidates must have ability to obtain and maintain a DHS/CISA EOD/Public Trust clearance.Security+ certificationDesired qualifications:Network+Elastic Certified EngineerCertified Ethical Hacker (CEH)CompTIA Advanced Security Practitioner (CASP+)SANS GIAC Incident Handler (GCIH)EC-Council Certified Incident Handler (E|CIH)Skills:CompTIA Security+Computer securityEnglishIntrusion DetectionSecurity AnalysisCyb.Sec.Eng. (Sensor /Device)Cyber Security Strategy

Job Description

Job TitleAnalysts are core members of the CARE Watch security team, providing EDR subject matter expertise. They are responsible for interpreting alerts, recommending remediation steps, and assisting with response and recovery activities when appropriate.Key responsibilities include:Investigate incidents to determine impact, threat mechanisms, and associated tactics, techniques, and procedures (TTPs).Own the response and remediation actions for each alert.Clearly communicate alert details and CARE recommendations to technical and management stakeholders.Develop appropriate response actions and guide agencies through incident response.Create remediation plans and document them in playbooks.Develop response and remediation templates.Collaborate with a TIA to produce Tech Notes and Agency Advisories.Provide EDR subject matter expertise for effective implementations.Assist with response and recovery efforts as needed.Document lessons learned and best practices and review with CARE Directors.Validate alerts for accurate true-positive determination.Pivot to Max support with appropriate detail.Support CARE Directors in advancing the CARE mission and vision.Support CISA and CETH as required.Required qualifications to be successful in this role:Due to the nature of the government contract requirements and/or clearance requirements, US citizenship is required as well as successful passing of CGI background check prior to beginning work. In addition, candidates must have ability to obtain and maintain a DHS/CISA EOD/Public Trust clearance.Security+ certificationDesired qualifications:Network+Elastic Certified EngineerCertified Ethical Hacker (CEH)CompTIA Advanced Security Practitioner (CASP+)SANS GIAC Incident Handler (GCIH)EC-Council Certified Incident Handler (E|CIH)Skills:CompTIA Security+Computer securityEnglishIntrusion DetectionSecurity AnalysisCyb.Sec.Eng. (Sensor /Device)Cyber Security Strategy