HUD - Sr. Incident Response Analyst

Senior incident response role supporting HUD, focusing on monitoring with SIEM/EDR and 24/7 operations, performing triage, and documenting incidents in a ServiceNow/SOC environment.

• Monitor security events and alerts using SIEM, SOAR, EDR, and other SOC tools in a 24/7/365 environment
• Perform initial triage and analysis of security alerts to determine severity, impact, and validity
• Identify and respond to potential security incidents including malware, phishing, unauthorized access, and anomalous behavior
• Escalate confirmed or high-risk incidents to Tier 2/3 analysts and incident response teams
• Document incidents, actions taken, and findings in ticketing systems (e.g., ServiceNow)

Tools include Splunk SIEM, EDR solutions, and SOAR; responsibilities include log analysis, threat detection, and security monitoring across network, endpoint, and cloud; requires strong incident response practices.

The ideal candidate is a senior SOC/incident response professional with 7+ years, proficient in SIEM (Splunk), EDR, and log analysis, and familiar with incident response. They should have strong networking knowledge and a public trust clearance in a HUD/government setting.