Job Requirements
Arlington, VA
Top Secret/SCI Polygraph not specified
Mid Level Career (5+ yrs experience)
Salary not specified
Join Premium to unlock estimated salaries 
Job Description
Job Title: Cyber Incident Manager
Location: Arlington, VA (Onsite)
Clearance: Active TS/SCI Required
Company: Quantum Science Solutions (QSS)
Compensation: Open
________________________________________
Position Overview
Quantum Science Solutions (QSS) is seeking a Cyber Incident Manager to support mission-critical cybersecurity operations, including incident triage, investigation, mitigation, and coordination of response activities.
The successful candidate will analyze incident data, investigate network alerts, assess the scope and impact of cybersecurity incidents, and coordinate response efforts from initial detection through final resolution. This role requires strong knowledge of incident handling methodologies, network defense, attack techniques, and enterprise security operations.
The Cyber Incident Manager will collaborate with technical teams and customer stakeholders to develop mitigation plans, support service restoration, and maintain accurate incident documentation.
________________________________________
Key Responsibilities
• Correlate incident data to identify trends, patterns, and recurring threats.
• Recommend defense-in-depth principles and practices, including layered defenses and security measures across multiple points within the enterprise.
• Perform Computer Network Defense (CND) incident triage to determine scope, urgency, and potential impact.
• Research and compile resolution procedures and workarounds to support incident mitigation.
• Apply cybersecurity concepts to detect and defend against intrusions across small and large enterprise networks.
• Conduct preliminary analysis of log data to identify suspicious activity and support investigations.
• Monitor external threat information sources to identify security issues that may affect the enterprise.
• Identify potential incident causes and gather relevant background information, including suspected infection vectors.
• Receive and analyze network alerts from multiple sources and determine possible causes.
• Track and document incidents from initial detection through final resolution.
• Coordinate with internal teams and external stakeholders to gather information and support ongoing incident response activities.
• Support mitigation planning and restoration of affected services.
• Provide coverage during assigned shift hours: Saturday and Sunday, 6:00 a.m.–6:30 p.m.; Monday, Tuesday, Thursday, and Friday, 8:00 a.m.–4:30 p.m.
________________________________________
Mandatory Skills
• U.S. citizenship.
• Active TS/SCI clearance.
• Five (5) or more years of directly relevant experience in cyber incident management or cybersecurity operations.
• Knowledge of incident response and handling methodologies.
• Familiarity with applicable incident reporting standards, requirements, and procedures.
• Knowledge of cyber incident scoring methodologies used to prioritize incident triage.
• Understanding of attack stages, including reconnaissance, scanning, enumeration, initial access, privilege escalation, persistence, network exploitation, and covering tracks.
• Ability to recognize and categorize vulnerabilities and associated attack techniques.
• Knowledge of basic systems administration and operating system hardening techniques.
• Knowledge of CND policies, procedures, and regulations.
• Understanding of threat actors with varying capabilities, including opportunistic attackers, organized groups, and nation-state actors.
• Knowledge of system and application security threats and vulnerabilities, including buffer overflows, mobile code, cross-site scripting, SQL and PL/SQL injection, race conditions, covert channels, replay attacks, return-oriented attacks, and malicious code.
• Ability to work onsite in Arlington, Virginia, and provide coverage during the assigned shift schedule.
________________________________________
Preferred Skills
• Advanced understanding of operational threat environments and adversary behaviors.
• In-depth knowledge of system and application vulnerabilities and their use in cyberattacks.
• One or more of the following certifications: GCIH, GCFA, GISP, GCED, CCFP, or CISSP.
________________________________________
Education
• Bachelor’s degree in Incident Management, Operations Management, Cybersecurity, or a related discipline required; or
• High school diploma with seven (7) to nine (9) years of incident management or cybersecurity experience.
________________________________________
Why QSS?
At QSS, you’ll support mission-critical cybersecurity operations by helping teams identify, assess, and respond to cyber threats. You’ll contribute to incident investigations, coordinate mitigation efforts, and help restore services while strengthening enterprise security and operational resilience.
________________________________________
Benefits Include:
• Competitive compensation with annual performance bonuses
• Premium Medical, Dental & Vision coverage
• Generous PTO plus Federal Holidays
• 401(k) with company match
Location: Arlington, VA (Onsite)
Clearance: Active TS/SCI Required
Company: Quantum Science Solutions (QSS)
Compensation: Open
________________________________________
Position Overview
Quantum Science Solutions (QSS) is seeking a Cyber Incident Manager to support mission-critical cybersecurity operations, including incident triage, investigation, mitigation, and coordination of response activities.
The successful candidate will analyze incident data, investigate network alerts, assess the scope and impact of cybersecurity incidents, and coordinate response efforts from initial detection through final resolution. This role requires strong knowledge of incident handling methodologies, network defense, attack techniques, and enterprise security operations.
The Cyber Incident Manager will collaborate with technical teams and customer stakeholders to develop mitigation plans, support service restoration, and maintain accurate incident documentation.
________________________________________
Key Responsibilities
• Correlate incident data to identify trends, patterns, and recurring threats.
• Recommend defense-in-depth principles and practices, including layered defenses and security measures across multiple points within the enterprise.
• Perform Computer Network Defense (CND) incident triage to determine scope, urgency, and potential impact.
• Research and compile resolution procedures and workarounds to support incident mitigation.
• Apply cybersecurity concepts to detect and defend against intrusions across small and large enterprise networks.
• Conduct preliminary analysis of log data to identify suspicious activity and support investigations.
• Monitor external threat information sources to identify security issues that may affect the enterprise.
• Identify potential incident causes and gather relevant background information, including suspected infection vectors.
• Receive and analyze network alerts from multiple sources and determine possible causes.
• Track and document incidents from initial detection through final resolution.
• Coordinate with internal teams and external stakeholders to gather information and support ongoing incident response activities.
• Support mitigation planning and restoration of affected services.
• Provide coverage during assigned shift hours: Saturday and Sunday, 6:00 a.m.–6:30 p.m.; Monday, Tuesday, Thursday, and Friday, 8:00 a.m.–4:30 p.m.
________________________________________
Mandatory Skills
• U.S. citizenship.
• Active TS/SCI clearance.
• Five (5) or more years of directly relevant experience in cyber incident management or cybersecurity operations.
• Knowledge of incident response and handling methodologies.
• Familiarity with applicable incident reporting standards, requirements, and procedures.
• Knowledge of cyber incident scoring methodologies used to prioritize incident triage.
• Understanding of attack stages, including reconnaissance, scanning, enumeration, initial access, privilege escalation, persistence, network exploitation, and covering tracks.
• Ability to recognize and categorize vulnerabilities and associated attack techniques.
• Knowledge of basic systems administration and operating system hardening techniques.
• Knowledge of CND policies, procedures, and regulations.
• Understanding of threat actors with varying capabilities, including opportunistic attackers, organized groups, and nation-state actors.
• Knowledge of system and application security threats and vulnerabilities, including buffer overflows, mobile code, cross-site scripting, SQL and PL/SQL injection, race conditions, covert channels, replay attacks, return-oriented attacks, and malicious code.
• Ability to work onsite in Arlington, Virginia, and provide coverage during the assigned shift schedule.
________________________________________
Preferred Skills
• Advanced understanding of operational threat environments and adversary behaviors.
• In-depth knowledge of system and application vulnerabilities and their use in cyberattacks.
• One or more of the following certifications: GCIH, GCFA, GISP, GCED, CCFP, or CISSP.
________________________________________
Education
• Bachelor’s degree in Incident Management, Operations Management, Cybersecurity, or a related discipline required; or
• High school diploma with seven (7) to nine (9) years of incident management or cybersecurity experience.
________________________________________
Why QSS?
At QSS, you’ll support mission-critical cybersecurity operations by helping teams identify, assess, and respond to cyber threats. You’ll contribute to incident investigations, coordinate mitigation efforts, and help restore services while strengthening enterprise security and operational resilience.
________________________________________
Benefits Include:
• Competitive compensation with annual performance bonuses
• Premium Medical, Dental & Vision coverage
• Generous PTO plus Federal Holidays
• 401(k) with company match
group id: 91142086
