CSSP/IR Analyst

About the Role Bespoke Corps, LLC (Bespoke) is seeking a skilled CSSP/IR Analyst to provide day‑to‑day onsite support for one of our valued customers. This role supports the success of the engagement by assisting onsite project staff, performing technical and penetration‑testing activities, supporting work assignments, and serving as a liaison between project staff and project managers. The ideal candidate is a self‑starter who thrives in both independent and team‑oriented environments and ensures the quality of all deliverables.What You'll DoSupport onsite project staff and assist with daily technical operationsPerform technical and penetration‑testing tasksConduct detailed triage of CSSP/IR incidents, including implementing IDS/IPS signaturesHunt for network intrusions using packet capture analysis, DNS log review, and intelligence sourcesAnalyze APT activity, attack patterns, threat actors, and defensive techniquesCreate detailed reports for both senior leaders and technical audiencesGather, analyze, and implement defenses against Indicators of Compromise (IoCs)Collaborate effectively with team members to support mission successRequired QualificationsActive TS security clearance with current SCI access (or SCI access within the last 24 months)DoD 8140 IAT‑II or higher certification (e.g., Security+, GCIH)Certified Ethical Hacker (CEH), or ability to obtain within 90 daysExperience categorizing CSSP/IR incidents using CJCSM 6510Experience creating and implementing custom Yara, Snort, and ESS rulesPreferred QualificationsExperience with scripting languages such as PythonWhy Join Bespoke CorpsWe are a mission‑driven team committed to delivering exceptional service and technical excellence. You’ll work in a collaborative environment where your expertise directly contributes to customer success.How To ApplyTo be considered, please apply directly through our BambooHR portal.Applications submitted through LinkedIn will not be reviewed.👉 Apply here: https://bespokecorps.bamboohr.com/careers/31?source=aWQ9MjE%3D