• Assist with investigative and forensic analysis across endpoints, network logs, and cloud telemetry under the direction of senior analysts • Support containment and response actions to neutralize active threats as directed by Incident Advisors or Senior Analysts • Triage and review alerts, indicators of compromise (IOCs), artifacts, and telemetry, escalating findings to senior analysts to help determine scope and root cause • Maintain clear and accurate engagement documentation, including trailheads, timelines, and playbooks • Develop incident response skills through hands-on engagements while following CIRT investigative and documentation standards • Contribute technical findings and summaries to support customer updates and post-incident reports • Identify and communicate detection or response gaps observed during investigations • Participate in shift handovers, debriefs, and post-incident reviews to ensure engagement continuity • Maintain accurate time and activity tracking to support operational visibility and service improvement

Role Description - Good understanding of Control-M Architecture and Agent/Server Communication - Good knowledge on Control-M tool to manage batch jobs, familiarity with features and usage of tool - Basic Unix - ITIL knowledge Good to have: - Experience of handling Priority incidents and critical issues related to Control-M - Basic MS SQL or Oracle Soft Skills: - Experience in 24*7 batch monitoring and production support - Excellent problem-solving skills and attention to detail - Ability to work collaboratively in a team - Strong communication and interpersonal skills Company Description At Zensar, we’re “experience-led everything”. We are committed to conceptualizing, designing, engineering, marketing, and managing digital solutions and experiences for over 130 leading enterprises. We are a company driven by a bold purpose: Together, we shape experiences for better futures. Whether for our clients, our people, or the world around us, this belief powers everything we do. At the heart of our culture is ONE with Client - a set of four core values that reflect who we are and how we work: One Zensar, Nurturing, Empowering, and Client Focus. Part of the $4.8 billion RPG Group, we’re a community of 10,000+ innovators across 30+ global locations, including Milpitas, Seattle, Princeton, Cape Town, London, Zurich, Singapore, and Mexico City. Explore Life at Zensar and join us to Grow. Own. Achieve. Learn. to be the best version of yourself. We believe the best work happens when individuality is celebrated, growth is encouraged, and well-being is prioritized. We are an equal employment opportunity (EEO) and affirmative action employer, committed to creating an inclusive workplace. All qualified applicants will be considered without regard to race, creed, color, ancestry, religion, sex, national origin, citizenship, age, sexual orientation, gender identity, disability, marital status, family medical leave status, or protected veteran status.

Role Description cFocus Software seeks a Incident Response Analyst to join our program supporting the National Institutes of Health (NIH). This position is fully remote. This position requires a Public Trust or the ability to obtain a public trust clearance. Qualifications - Public Trust Clearance - B.S. Computer Science, Information Technology, or a related field - 5+ years of cybersecurity experience - 5+ years supporting cybersecurity incident response or Security Operations Center (SOC) environments - Experience investigating security incidents across Windows, Linux, cloud, and enterprise networks - Experience with SIEM technologies and security monitoring platforms - Experience performing incident triage and root cause analysis - Knowledge of malware analysis and digital forensics concepts - Understanding of NIST Cybersecurity Framework and NIST SP 800-61 Incident Handling Guide - Ability to obtain and maintain required NIH suitability/background investigation - Active GCIH, GCFA, GCIA, CISSP, CySA+, Security+, CEH, CHFI, CISM, or GSEC Requirements - Monitor security events across the NIH/OD-OIT environment - Detect, analyze, and respond to cybersecurity incidents affecting enterprise systems - Perform incident triage to determine scope, severity, urgency, and operational impact - Support incident containment, eradication, recovery, and restoration activities - Investigate suspected security incidents within established response time requirements - Coordinate incident handling activities with NIH and HHS cybersecurity organizations - Monitor enterprise security logs and alerts - Perform network and host-based intrusion detection - Monitor cloud applications and cloud infrastructure - Support continuous 24x7 security monitoring operations - Identify indicators of compromise (IOCs) and suspicious activity

Role Description The analyst will focus on incident analysis and telemetry validation, helping ensure that this client’s detection systems are accurate, actionable, and continuously improving. This includes: - Analyzing high-priority incidents (Sub-0 to Sub-2) - Understanding system behavior through telemetry signals - Identifying opportunities to improve detection logic and reduce noise in alerting systems The work directly impacts incident detection accuracy, response speed, and overall service reliability. This is not a traditional reporting or dashboarding role. Instead, it is a hands-on investigative position requiring: - Strong analytical thinking - Technical curiosity - The ability to interpret complex system behavior You will spend your time investigating incidents, validating signals, and presenting findings, often working with ambiguous or incomplete data. While tools like KQL are important, the role increasingly emphasizes understanding the data and systems, rather than just generating queries, especially as AI augments query development. Two analysts will share this workload, splitting responsibilities across ongoing incident analysis. Qualifications - 3 years of experience in data analysis (SQL, PowerBI or Grafana, Excel) and incident investigation - Working proficiency (3 years) in KQL or similar query tools - 2 years of experience in electrical or mechanical systems monitoring (mechanical preferred) Requirements - Daily review of overnight incidents and telemetry signals - Structured analysis on high-priority incidents - Participation in daily syncs to present findings and collaborate with engineers and SMEs - Maintaining strong data hygiene practices - Using tools like KQL to explore datasets while validating outputs Benefits - Medical, dental & vision - Critical Illness, Accident, and Hospital - 401(k) Retirement Plan – Pre-tax and Roth post-tax contributions available - Life Insurance (Voluntary Life & AD&D for the employee and dependents) - Short and long-term disability - Health Spending Account (HSA) - Transportation benefits - Employee Assistance Program - Time Off/Leave (PTO, Vacation or Sick Leave) Company Description We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe, and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change.