Role Description cFocus Software seeks a Incident Response Analyst to join our program supporting the National Institutes of Health (NIH). This position is fully remote. This position requires a Public Trust or the ability to obtain a public trust clearance. Qualifications - Public Trust Clearance - B.S. Computer Science, Information Technology, or a related field - 5+ years of cybersecurity experience - 5+ years supporting cybersecurity incident response or Security Operations Center (SOC) environments - Experience investigating security incidents across Windows, Linux, cloud, and enterprise networks - Experience with SIEM technologies and security monitoring platforms - Experience performing incident triage and root cause analysis - Knowledge of malware analysis and digital forensics concepts - Understanding of NIST Cybersecurity Framework and NIST SP 800-61 Incident Handling Guide - Ability to obtain and maintain required NIH suitability/background investigation - Active GCIH, GCFA, GCIA, CISSP, CySA+, Security+, CEH, CHFI, CISM, or GSEC Requirements - Monitor security events across the NIH/OD-OIT environment - Detect, analyze, and respond to cybersecurity incidents affecting enterprise systems - Perform incident triage to determine scope, severity, urgency, and operational impact - Support incident containment, eradication, recovery, and restoration activities - Investigate suspected security incidents within established response time requirements - Coordinate incident handling activities with NIH and HHS cybersecurity organizations - Monitor enterprise security logs and alerts - Perform network and host-based intrusion detection - Monitor cloud applications and cloud infrastructure - Support continuous 24x7 security monitoring operations - Identify indicators of compromise (IOCs) and suspicious activity

Role Description The analyst will focus on incident analysis and telemetry validation, helping ensure that this client’s detection systems are accurate, actionable, and continuously improving. This includes: - Analyzing high-priority incidents (Sub-0 to Sub-2) - Understanding system behavior through telemetry signals - Identifying opportunities to improve detection logic and reduce noise in alerting systems The work directly impacts incident detection accuracy, response speed, and overall service reliability. This is not a traditional reporting or dashboarding role. Instead, it is a hands-on investigative position requiring: - Strong analytical thinking - Technical curiosity - The ability to interpret complex system behavior You will spend your time investigating incidents, validating signals, and presenting findings, often working with ambiguous or incomplete data. While tools like KQL are important, the role increasingly emphasizes understanding the data and systems, rather than just generating queries, especially as AI augments query development. Two analysts will share this workload, splitting responsibilities across ongoing incident analysis. Qualifications - 3 years of experience in data analysis (SQL, PowerBI or Grafana, Excel) and incident investigation - Working proficiency (3 years) in KQL or similar query tools - 2 years of experience in electrical or mechanical systems monitoring (mechanical preferred) Requirements - Daily review of overnight incidents and telemetry signals - Structured analysis on high-priority incidents - Participation in daily syncs to present findings and collaborate with engineers and SMEs - Maintaining strong data hygiene practices - Using tools like KQL to explore datasets while validating outputs Benefits - Medical, dental & vision - Critical Illness, Accident, and Hospital - 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available - Life Insurance (Voluntary Life & AD&D for the employee and dependents) - Short and long-term disability - Health Spending Account (HSA) - Transportation benefits - Employee Assistance Program - Time Off/Leave (PTO, Vacation or Sick Leave) Company Description We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe, and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change.

Role Description At Hewlett Packard Enterprise (HPE), we are seeking a highly experienced and technically proficient Principal Advanced Threat Response Analyst to join our global security organization. The ideal candidate will have over a decade of hands-on experience in incident response, threat hunting, threat intelligence, digital forensics, malware analysis, and incident management, with proven expertise in leading investigations into Advanced Persistent Threats (APT) and other complex, multi-stage intrusions, including widescale Ransomware attacks. This role requires a blend of technical mastery, investigative acumen, and leadership capability. The candidate will drive proactive and reactive threat hunting efforts, lead critical incident response engagements, and develop both short-term containment and long-term remediation strategies to strengthen the organization’s cyber defense and improve overall security posture. This role is fully remote USA. Key Responsibilities - Lead complex threat investigations involving APTs, ransomware, insider threats, and nation-state activity across enterprise and cloud environments. - Drive proactive threat hunting programs focused on emerging TTPs, behavioral analytics, and detection gaps within EDR, SIEM, and network telemetry data. - Develop and execute purple team exercises, simulating advanced adversarial tradecraft to assess detection and response capabilities. - Collaborate with red teams and offensive security engineers to understand attacker tools, techniques, and procedures (TTPs) at a deep technical level and translate that understanding into effective detections. - Perform incident command during major security events — leading multidisciplinary response teams, engaging executive stakeholders, and delivering after-action reports and strategic recommendations. - Develop custom detections, playbooks, and automation in Splunk, Sentinel, or other platforms to improve time-to-detect and time-to-contain metrics. - Mentor and coach junior analysts, hunters, and incident responders — fostering an environment of continuous learning and operational excellence. - Contribute to threat intelligence initiatives, enriching internal intelligence feeds with context from ongoing investigations and external research. - Collaborate with engineering and architecture teams to harden security controls across endpoint, network, and cloud layers. - Conduct tabletop exercises and technical simulations to validate response readiness and identify process or technology gaps. Qualifications - 10+ years of experience in cybersecurity roles focused on incident response, threat hunting, digital forensics, threat intelligence, or SOC operations. - Proven record of leading end-to-end investigations of advanced threat campaigns (APT) or other complex multi-vector attacks. - Strong understanding of MITRE ATT&CK framework, adversary emulation, and kill chain analysis. - Demonstrated expertise in both enterprise IT and cloud security (AWS, Azure, GCP) — from defensive and offensive perspectives. - Working knowledge of red team / offensive security operations and the ability to deconstruct offensive tools (e.g., Cobalt Strike, Empire, Metasploit, Sliver, Mimikatz, other open-source OffSec tools) to detect their presence and behaviors. - Deep knowledge of SIEMs (Splunk, Sentinel, ELK), EDR platforms (CrowdStrike, Carbon Black, Defender ATP), and forensics tools. - Strong scripting or automation experience (Python, PowerShell, Bash) for hunting, enrichment, or data manipulation. - Ability to design and facilitate purple team exercises and incident response tabletop simulations replicating advanced adversary techniques. - Excellent communication and leadership skills; ability to brief executives, collaborate across functions, and guide junior team members. Certifications - Advanced SANS certifications such as GCFA, GREM, GCIA, GNFA, GCTI, GSEC, or GCIH. - Offensive certifications such as OSCP, OSEP, OSED, or CRTO. - Recognition from hands-on platforms (e.g., Hack The Box, Cyber Defenders, TryHackMe) demonstrating technical proficiency. - Cloud security certifications (AWS Security Specialty, Azure Security Engineer, GCP Professional Cloud Security Engineer) are a plus. Benefits - Health & Wellbeing: Comprehensive suite of benefits that supports physical, financial, and emotional wellbeing. - Personal & Professional Development: Specific programs catered to helping you reach any career goals you have. - Unconditional Inclusion: A culture that celebrates individual uniqueness and values varied backgrounds. Salary Information The expected salary/wage range for this position is provided below. Actual offer may vary from this range based upon geographic location, work experience, education/training, and/or skill level. - United States of America: Annual Salary USD 120,500 - 276,500 in Texas. The listed salary range reflects base salary. Variable incentives may also be offered.

Role Description FTI Consulting is registering Contract Analysts for upcoming Contract Solutions projects expected to start the week of October 6th! Contract Analysts work on a per-project basis and work is performed at the direction of attorneys who provide briefing materials, along with substantive training and support to the Contract Analysts. Contract Analysts will be members of a team that also includes project managers and contract subject matter experts. These are work from home opportunities but candidates must be based in one of the following states: - AL - AZ - CT - DE - DC - GA - IL - IN - LA - ME - MD - MA - MI - NJ - NY - NC - PA - SC - TX - VA - VT Qualifications - Bachelor’s degree - Experience reviewing and analyzing contracts; with a good understanding of contract structure, terminology and terms - Attention to detail, able to identify small nuances in contract language - Critical thinking / logical reasoning skills, able to interpret ambiguous and confusing contract language - Ability to quickly and accurately make decisions, entering data for large volumes of contracts, while also identifying where contract language presents new issues that need to be escalated to senior team members for clarification - Ability to escalate questions about contracts you review in a way that is clear, to the point, and isolates the issue at hand - Experience and comfort working in Microsoft Excel, plus comfortable working in an online review tool Requirements - Experience working in-house at a corporation - Experience drafting and negotiating contracts (In-house and/or law firm) - Experience with Relativity, the platform that we use - Experience working in contract review and artificial intelligence tools like Heretik, Kira, eBrevia, Luminance or DocuSign Insights - A law degree (Juris Doctor or LLM) or Paralegal certification - Data science degree, background or experience - Fluency in a foreign language Benefits - $30 per hour Company Description FTI Consulting is the leading global expert firm for organizations facing crisis and transformation. We work with many of the world’s top multinational corporations, law firms, banks and private equity firms on their most important issues to deliver impact that makes a difference. From resolving disputes, navigating crises, managing risk and optimizing performance, our teams respond rapidly to dynamic and complex situations. At FTI Consulting, you’ll work side-by-side with leaders who have shaped history, helping solve the biggest challenges making headlines today. From day one, you’ll be an integral part of a focused team where you can make a real impact. You’ll be surrounded by an open, collaborative culture that embraces diversity, recognition, professional development and, most importantly, you.