4515 Incident Response Lead/Advisor

OVERVIEW:

We are seeking an experienced cyber professional to join our team and support our mission critical customer. As the Incident Response Lead/Advisor, you will advise/mentor/coach a team of cyber security professionals on best practices regarding incident responses on a variety of networks, platforms, and tools. Your previous experience working collaboratively across cross-functional teams/staff, at multiple levels, to deliver short-term, medium-term, and long-term response efforts would drive customer and program success.

REQUIRED QUALIFICATIONS:

• Bachelor's degree in a relevant field
• DoD 8570 IAT Level II (CySA+) certification within 30 days of contract start
• 8 years of experience (or 6 years of experience with a relevant Master's Degree) with identifying, analyzing, and responding to security incidents such as cyberattacks, data breaches, and system vulnerabilities.
• Monitoring and analyzing security logs and network traffic to detect anomalies
• Executing IR playbooks and conducting digital forensics
• Collaborating with IT and security teams to mitigate threats and prevent recurrence
• Advising on security policies, risk management, and compliance
• These roles often require rotational shifts to ensure 24x7 coverage, especially in large enterprises and financial institutions
• Knowledge of cyber adversary tactics, techniques, and procedures, along with analysis of advanced intrusions across a complex global network and basic cyber-security forensics procedures.
• Understanding of how to read and interpret malware analysis reports.
• Strong oral and written communications skills and ability to interact effectively with technical and non-technical audiences.
• Excellent technical editing of formal report production and related skills.

DESIRED QUALIFICATIONS:

• CEH (Certified Ethical Hacker)
• GCIH (GIAC Certified Incident Handler)
• GCIA (GIAC Certified Intrusion Analyst)
• Cyber Mission Force analyst or operator experience
• Management experience
• Experience with DoD cybersecurity operations
• Experience with classified system information assurance

CLEARANCE:

• Active TS/SCI clearance minimum required