Incident Response Analyst

About the role

CDW is hiring an Incident Response Analyst for a contract-to-hire opportunity supporting an end client. The role is expected to transition into a permanent position after 6 months.

This position works on a hybrid model, with two days each week on site and the remaining three days working remotely. The client location will be either New York City or Washington, DC.

The role centers on tier-2 triage of security tickets, incident handling, digital forensics, and cyber threat intelligence. Experience with Microsoft Sentinel and Arctic Wolf is a strong plus.

What you'll do

• Review, investigate, and manage security incidents from initial triage through response.
• Perform digital forensic analysis and examine evidence tied to security events.
• Assist with collecting and analyzing cyber threat intelligence.
• Create, update, and improve incident response playbooks.
• Take part in tabletop exercises and related preparedness activities.
• Work with external breach response partners during incident situations.
• Record incident details and contribute to post-incident reviews and follow-ups.

What you'll need

• At least 4 years of experience in incident response or security operations.
• Practical experience using forensic tools and investigation methods.
• Understanding of threat intelligence principles and related workflows.
• Strong analytical thinking and clear documentation abilities.
• Preferred certifications include GCIH and GCIA.
• Interest in security work with a mission-driven focus.

Additional details

This is a contract-to-hire engagement rather than a direct permanent hire at the outset. Conversion to full-time employment with the client is expected after 6 months.

The role requires a hybrid schedule with on-site work 2 days per week and remote work 3 days per week. The client site must be one of the following: New York City or Washington, DC.

Relevant background notes for the role include tier-2 incident triage, cyber threat intelligence exposure, and digital forensic experience. Familiarity with Microsoft Sentinel and Arctic Wolf is considered advantageous.

Qualifications

Candidates should have a minimum of 4 years of relevant experience in incident response or security operations. Certifications such as GCIH or GCIA are preferred.