Job Requirements
Arlington, VA
Top Secret/SCI Polygraph not specified
Senior Level Career (10+ yrs experience)
Salary not specified
Join Premium to unlock estimated salaries 
Job Description
Job Title: Sr Network Incident Response Engineer
Location: Arlington, VA (Onsite)
Clearance: Active TS/SCI Required
Company: Quantum Science Solutions (QSS)
Compensation: Open Rate
Position Overview
Quantum Science Solutions (QSS) supports mission-critical federal cybersecurity
programs focused on protecting government systems and critical infrastructure from
evolving cyber threats. Our team delivers advanced cybersecurity capabilities, including
proactive threat hunting, incident response, network forensics, and threat mitigation.
We are seeking a Senior Network Incident Response Engineer to lead complex
cybersecurity investigations, analyze network-based threats, and strengthen enterprise
security. This role requires extensive experience in network incident response, traffic
analysis, and enterprise edge-device technologies, with particular emphasis on Cisco,
Ivanti, Palo Alto, Ciena, and Juniper.
The successful candidate will provide technical leadership in incident investigations,
evaluate and integrate advanced cybersecurity technologies, and collaborate with
technical teams and government stakeholders to identify vulnerabilities, develop
remediation strategies, and enhance network security and resilience.
Key Responsibilities
• Lead advanced network-centric incident response investigations, threat hunting,
and analysis of adversary tactics, techniques, and procedures (TTPs).
• Investigate compromises involving enterprise edge devices, including routers,
switches, firewalls, VPNs, and remote access appliances.
• Analyze network traffic, packet captures (PCAP), flow records, DNS logs, proxy logs,
and device telemetry to identify malicious activity.
• Reconstruct cyberattacks, including attacker movement, command-and-control
activity, and potential data exfiltration.
• Assess network topologies, device configurations, trust boundaries, and security
vulnerabilities to recommend mitigation and hardening measures.
• Support incident containment, eradication, recovery, and implementation of
security countermeasures.
• Evaluate, integrate, and support emerging network forensic, monitoring, and cyber
response technologies.
• Configure and deploy network TAPs, packet brokers, SPAN ports, and switching
equipment in operational environments without disrupting production traffic.
• Provide technical leadership and coordinate onsite and remote incident response
activities with government stakeholders and technical teams.
• Preserve forensic evidence integrity and ensure investigations follow established
procedures and standards.
• Develop technical reports, executive summaries, incident findings, and Computer
Network Defense (CND) guidance.
• Maintain incident response documentation, technical procedures, and knowledge
sharing resources.
Mandatory Skills
• U.S. Citizenship.
• Active TS/SCI clearance.
• Ability to obtain DHS Suitability.
• Ten (10) or more years of directly relevant professional experience.
• Three (3) or more years of experience evaluating and implementing new cyber
response or network forensic capabilities.
• Hands-on incident response or network operations experience involving enterprise
edge devices from at least two of the following vendors: Cisco, Ivanti, Palo Alto,
Ciena, or Juniper.
• Strong knowledge of network architecture, routing, switching, VPNs, firewalls,
segmentation, and defense-in-depth security.
• Experience conducting cyber incident response, including investigation, scoping,
containment, eradication, and recovery.
• Ability to analyze network traffic, PCAPs, flow records, DNS logs, proxy logs, and
device telemetry to identify anomalous or malicious activity.
• Experience reconstructing malicious network activity using traffic analysis,
metadata, and device logs.
• Understanding of cyberattack stages, network-based threats, system
vulnerabilities, and proactive threat detection.
• Knowledge of Computer Network Defense (CND) policies, procedures, and
regulations.
• Proficiency with Windows and Linux/Unix operating systems.
• Experience assessing network security configurations, device integrity, and
enterprise network environments.
• Ability to rapidly configure network TAPs, packet brokers, SPAN ports, and
managed/unmanaged switches without disrupting production or air-gapped
environments.
• Strong analytical, troubleshooting, decision-making, and technical communication
skills.
• Ability to work independently under pressure and collaborate with distributed
technical teams and government stakeholders.
Preferred Skills
• Experience leading or mentoring technical teams in incident response, network
operations, or security engineering.
• Network or systems administration experience in large enterprise or service
provider environments.
• Advanced knowledge of adversary TTPs, MITRE ATT&CK, and nation-state cyber
threats.
• Knowledge of Zero Trust Architecture, defense-in-depth, and network device
integrity verification.
• Experience correlating security events across firewalls, IDS/IPS, endpoint security,
and SIEM platforms.
• Experience investigating network beaconing, command-and-control (C2)
communications, and data exfiltration.
• Familiarity with Identity and Access Management (IAM) and enterprise security
architecture assessments.
• Knowledge of system and application vulnerabilities, including injection attacks,
buffer overflows, replay attacks, and malicious code.
• Experience with field cybersecurity diagnostics, vulnerability scanning, high-speed
packet capture, and industrial protocols such as Modbus, DNP3, and OPC UA.
• Ability to securely pack, transport, and deploy ruggedized cybersecurity equipment
within applicable travel and weight restrictions.
Education
Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, or a related
technical discipline.
OR
High School Diploma/GED with twenty-two (22) or more years of technical experience in
the relevant area of expertise.
Desired Certifications
Cybersecurity & Incident Response:
• IASAE II
• CSSP Analyst
• CSSP Incident Responder
• Certified Ethical Hacker (CEH)
• GIAC Certified Intrusion Analyst (GCIA)
• GIAC Certified Incident Handler (GCIH)
• GIAC Network Forensic Analyst (GNFA) — Preferred for network forensics
• GIAC Response and Industrial Defense (GRID)
• Global Industrial Cyber Security Professional (GICSP)
• GIAC Critical Infrastructure Protection (GCIP)
Network & Vendor Certifications:
• Cisco CCNA, CCNP Security, or CCNP Enterprise
• Palo Alto Networks PCNSE
• Juniper JNCIS or JNCIP
• Relevant Ciena or Ivanti certifications
Why QSS?
At QSS, you'll support mission-critical federal cybersecurity operations by investigating
advanced cyber threats, strengthening network security, and protecting critical
infrastructure. You'll collaborate with experienced cybersecurity professionals and work
with advanced technologies to enhance threat detection, incident response, and overall
security capabilities.
Benefits Include:
• Competitive compensation with annual performance bonuses
• Premium Medical, Dental & Vision coverage
• Generous PTO plus Federal Holidays
• 401(k) with company match
Location: Arlington, VA (Onsite)
Clearance: Active TS/SCI Required
Company: Quantum Science Solutions (QSS)
Compensation: Open Rate
Position Overview
Quantum Science Solutions (QSS) supports mission-critical federal cybersecurity
programs focused on protecting government systems and critical infrastructure from
evolving cyber threats. Our team delivers advanced cybersecurity capabilities, including
proactive threat hunting, incident response, network forensics, and threat mitigation.
We are seeking a Senior Network Incident Response Engineer to lead complex
cybersecurity investigations, analyze network-based threats, and strengthen enterprise
security. This role requires extensive experience in network incident response, traffic
analysis, and enterprise edge-device technologies, with particular emphasis on Cisco,
Ivanti, Palo Alto, Ciena, and Juniper.
The successful candidate will provide technical leadership in incident investigations,
evaluate and integrate advanced cybersecurity technologies, and collaborate with
technical teams and government stakeholders to identify vulnerabilities, develop
remediation strategies, and enhance network security and resilience.
Key Responsibilities
• Lead advanced network-centric incident response investigations, threat hunting,
and analysis of adversary tactics, techniques, and procedures (TTPs).
• Investigate compromises involving enterprise edge devices, including routers,
switches, firewalls, VPNs, and remote access appliances.
• Analyze network traffic, packet captures (PCAP), flow records, DNS logs, proxy logs,
and device telemetry to identify malicious activity.
• Reconstruct cyberattacks, including attacker movement, command-and-control
activity, and potential data exfiltration.
• Assess network topologies, device configurations, trust boundaries, and security
vulnerabilities to recommend mitigation and hardening measures.
• Support incident containment, eradication, recovery, and implementation of
security countermeasures.
• Evaluate, integrate, and support emerging network forensic, monitoring, and cyber
response technologies.
• Configure and deploy network TAPs, packet brokers, SPAN ports, and switching
equipment in operational environments without disrupting production traffic.
• Provide technical leadership and coordinate onsite and remote incident response
activities with government stakeholders and technical teams.
• Preserve forensic evidence integrity and ensure investigations follow established
procedures and standards.
• Develop technical reports, executive summaries, incident findings, and Computer
Network Defense (CND) guidance.
• Maintain incident response documentation, technical procedures, and knowledge
sharing resources.
Mandatory Skills
• U.S. Citizenship.
• Active TS/SCI clearance.
• Ability to obtain DHS Suitability.
• Ten (10) or more years of directly relevant professional experience.
• Three (3) or more years of experience evaluating and implementing new cyber
response or network forensic capabilities.
• Hands-on incident response or network operations experience involving enterprise
edge devices from at least two of the following vendors: Cisco, Ivanti, Palo Alto,
Ciena, or Juniper.
• Strong knowledge of network architecture, routing, switching, VPNs, firewalls,
segmentation, and defense-in-depth security.
• Experience conducting cyber incident response, including investigation, scoping,
containment, eradication, and recovery.
• Ability to analyze network traffic, PCAPs, flow records, DNS logs, proxy logs, and
device telemetry to identify anomalous or malicious activity.
• Experience reconstructing malicious network activity using traffic analysis,
metadata, and device logs.
• Understanding of cyberattack stages, network-based threats, system
vulnerabilities, and proactive threat detection.
• Knowledge of Computer Network Defense (CND) policies, procedures, and
regulations.
• Proficiency with Windows and Linux/Unix operating systems.
• Experience assessing network security configurations, device integrity, and
enterprise network environments.
• Ability to rapidly configure network TAPs, packet brokers, SPAN ports, and
managed/unmanaged switches without disrupting production or air-gapped
environments.
• Strong analytical, troubleshooting, decision-making, and technical communication
skills.
• Ability to work independently under pressure and collaborate with distributed
technical teams and government stakeholders.
Preferred Skills
• Experience leading or mentoring technical teams in incident response, network
operations, or security engineering.
• Network or systems administration experience in large enterprise or service
provider environments.
• Advanced knowledge of adversary TTPs, MITRE ATT&CK, and nation-state cyber
threats.
• Knowledge of Zero Trust Architecture, defense-in-depth, and network device
integrity verification.
• Experience correlating security events across firewalls, IDS/IPS, endpoint security,
and SIEM platforms.
• Experience investigating network beaconing, command-and-control (C2)
communications, and data exfiltration.
• Familiarity with Identity and Access Management (IAM) and enterprise security
architecture assessments.
• Knowledge of system and application vulnerabilities, including injection attacks,
buffer overflows, replay attacks, and malicious code.
• Experience with field cybersecurity diagnostics, vulnerability scanning, high-speed
packet capture, and industrial protocols such as Modbus, DNP3, and OPC UA.
• Ability to securely pack, transport, and deploy ruggedized cybersecurity equipment
within applicable travel and weight restrictions.
Education
Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, or a related
technical discipline.
OR
High School Diploma/GED with twenty-two (22) or more years of technical experience in
the relevant area of expertise.
Desired Certifications
Cybersecurity & Incident Response:
• IASAE II
• CSSP Analyst
• CSSP Incident Responder
• Certified Ethical Hacker (CEH)
• GIAC Certified Intrusion Analyst (GCIA)
• GIAC Certified Incident Handler (GCIH)
• GIAC Network Forensic Analyst (GNFA) — Preferred for network forensics
• GIAC Response and Industrial Defense (GRID)
• Global Industrial Cyber Security Professional (GICSP)
• GIAC Critical Infrastructure Protection (GCIP)
Network & Vendor Certifications:
• Cisco CCNA, CCNP Security, or CCNP Enterprise
• Palo Alto Networks PCNSE
• Juniper JNCIS or JNCIP
• Relevant Ciena or Ivanti certifications
Why QSS?
At QSS, you'll support mission-critical federal cybersecurity operations by investigating
advanced cyber threats, strengthening network security, and protecting critical
infrastructure. You'll collaborate with experienced cybersecurity professionals and work
with advanced technologies to enhance threat detection, incident response, and overall
security capabilities.
Benefits Include:
• Competitive compensation with annual performance bonuses
• Premium Medical, Dental & Vision coverage
• Generous PTO plus Federal Holidays
• 401(k) with company match
group id: 91142086
