Senior Network Incident Response Engineer

Job Title: Senior Network Incident Response Engineer
Location: Arlington, VA (Onsite)
Clearance: Active TS/SCI Required
Company: Quantum Science Solutions (QSS)
Compensation: Open Rate
________________________________________
Position Overview
Quantum Science Solutions (QSS) supports mission-critical federal cybersecurity programs focused on protecting government systems and critical infrastructure from evolving cyber threats. Our team delivers advanced cybersecurity capabilities, including proactive threat hunting, incident response, network forensics, and threat mitigation.
We are seeking a Senior Network Incident Response Engineer to lead complex cybersecurity investigations, analyze network-based threats, and strengthen enterprise security. This role requires extensive experience in network incident response, traffic analysis, and enterprise edge-device technologies, with particular emphasis on Cisco, Ivanti, Palo Alto, Ciena, and Juniper.
The successful candidate will provide technical leadership in incident investigations, evaluate and integrate advanced cybersecurity technologies, and collaborate with technical teams and government stakeholders to identify vulnerabilities, develop remediation strategies, and enhance network security and resilience.
________________________________________
Key Responsibilities
• Lead advanced network-centric incident response investigations, threat hunting, and analysis of adversary tactics, techniques, and procedures (TTPs).
• Investigate compromises involving enterprise edge devices, including routers, switches, firewalls, VPNs, and remote access appliances.
• Analyze network traffic, packet captures (PCAP), flow records, DNS logs, proxy logs, and device telemetry to identify malicious activity.
• Reconstruct cyberattacks, including attacker movement, command-and-control activity, and potential data exfiltration.
• Assess network topologies, device configurations, trust boundaries, and security vulnerabilities to recommend mitigation and hardening measures.
• Support incident containment, eradication, recovery, and implementation of security countermeasures.
• Evaluate, integrate, and support emerging network forensic, monitoring, and cyber response technologies.
• Configure and deploy network TAPs, packet brokers, SPAN ports, and switching equipment in operational environments without disrupting production traffic.
• Provide technical leadership and coordinate onsite and remote incident response activities with government stakeholders and technical teams.
• Preserve forensic evidence integrity and ensure investigations follow established procedures and standards.
• Develop technical reports, executive summaries, incident findings, and Computer Network Defense (CND) guidance.
• Maintain incident response documentation, technical procedures, and knowledge-sharing resources.
________________________________________
Mandatory Skills
• U.S. Citizenship.
• Active TS/SCI clearance.
• Ability to obtain DHS Suitability.
• Ten (10) or more years of directly relevant professional experience.
• Three (3) or more years of experience evaluating and implementing new cyber response or network forensic capabilities.
• Hands-on incident response or network operations experience involving enterprise edge devices from at least two of the following vendors: Cisco, Ivanti, Palo Alto, Ciena, or Juniper.
• Strong knowledge of network architecture, routing, switching, VPNs, firewalls, segmentation, and defense-in-depth security.
• Experience conducting cyber incident response, including investigation, scoping, containment, eradication, and recovery.
• Ability to analyze network traffic, PCAPs, flow records, DNS logs, proxy logs, and device telemetry to identify anomalous or malicious activity.
• Experience reconstructing malicious network activity using traffic analysis, metadata, and device logs.
• Understanding of cyberattack stages, network-based threats, system vulnerabilities, and proactive threat detection.
• Knowledge of Computer Network Defense (CND) policies, procedures, and regulations.
• Proficiency with Windows and Linux/Unix operating systems.
• Experience assessing network security configurations, device integrity, and enterprise network environments.
• Ability to rapidly configure network TAPs, packet brokers, SPAN ports, and managed/unmanaged switches without disrupting production or air-gapped environments.
• Strong analytical, troubleshooting, decision-making, and technical communication skills.
• Ability to work independently under pressure and collaborate with distributed technical teams and government stakeholders.
________________________________________
Preferred Skills
• Experience leading or mentoring technical teams in incident response, network operations, or security engineering.
• Network or systems administration experience in large enterprise or service-provider environments.
• Advanced knowledge of adversary TTPs, MITRE ATT&CK, and nation-state cyber threats.
• Knowledge of Zero Trust Architecture, defense-in-depth, and network device integrity verification.
• Experience correlating security events across firewalls, IDS/IPS, endpoint security, and SIEM platforms.
• Experience investigating network beaconing, command-and-control (C2) communications, and data exfiltration.
• Familiarity with Identity and Access Management (IAM) and enterprise security architecture assessments.
• Knowledge of system and application vulnerabilities, including injection attacks, buffer overflows, replay attacks, and malicious code.
• Experience with field cybersecurity diagnostics, vulnerability scanning, high-speed packet capture, and industrial protocols such as Modbus, DNP3, and OPC UA.
• Ability to securely pack, transport, and deploy ruggedized cybersecurity equipment within applicable travel and weight restrictions.
________________________________________
Education
Required:
Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, or a related technical discipline.
OR
High School Diploma/GED with twenty-two (22) or more years of technical experience in the relevant area of expertise.

________________________________________
Desired Certifications
Cybersecurity & Incident Response:
• IASAE II
• CSSP Analyst
• CSSP Incident Responder
• Certified Ethical Hacker (CEH)
• GIAC Certified Intrusion Analyst (GCIA)
• GIAC Certified Incident Handler (GCIH)
• GIAC Network Forensic Analyst (GNFA) — Preferred for network forensics
• GIAC Response and Industrial Defense (GRID)
• Global Industrial Cyber Security Professional (GICSP)
• GIAC Critical Infrastructure Protection (GCIP)
Network & Vendor Certifications:
• Cisco CCNA, CCNP Security, or CCNP Enterprise
• Palo Alto Networks PCNSE
• Juniper JNCIS or JNCIP
• Relevant Ciena or Ivanti certifications
________________________________________
Why QSS?
At QSS, you'll support mission-critical federal cybersecurity operations by investigating advanced cyber threats, strengthening network security, and protecting critical infrastructure. You'll collaborate with experienced cybersecurity professionals and work with advanced technologies to enhance threat detection, incident response, and overall security capabilities.
________________________________________
Benefits Include:
• Competitive compensation with annual performance bonuses
• Premium Medical, Dental & Vision coverage
• Generous PTO plus Federal Holidays
• 401(k) with company match