Incident Response Lead (Cybersecurity)

Location: Washington, DC office or remote within the United States. The role is contingent upon additional funding.

Salary: $140,000–$150,000 per year

Company

hirify.global Federal is the federal segment of Everforth, delivering technology solutions in data and AI, cybersecurity, and enterprise transformation for defense, intelligence, and federal civilian agencies.

What you will do

• Lead incident response from triage and containment through remediation, reporting, and post-incident improvement.
• Serve as the Tier 3 senior escalation point and subject matter expert for security operations.
• Conduct threat hunting, malware triage, network analysis, and live response across enterprise environments.
• Develop custom detections, hunt plans, playbooks, runbooks, and repeatable operational processes.
• Coordinate with networking, systems administration, technology support, and executive leadership teams.
• Identify new data sources, analysis techniques, and automation opportunities to improve detection and response.

Requirements

• 6+ years of progressive experience in security operations and incident response, including senior or Tier 3 analyst experience.
• Demonstrated ability to lead enterprise incident response efforts and communicate findings to technical teams and senior leadership.
• Experience with the Cyber Kill Chain, MITRE ATT&CK, Diamond Model of Intrusion Analysis, or equivalent frameworks.
• Experience with SIEM, vulnerability scanners, malware analyzers, IDS/IPS, EDR, and security event detection.
• Security operations experience across Windows, Linux, macOS, and cloud platforms such as AWS, Azure, or GCP.
• Ability to develop incident procedures, technical security standards, monitoring standards, and automation using scripting.

Nice to have

• Behavior-based analytics, anomaly detection, threat modeling, cloud forensics, and SaaS or multi-tenant incident response experience.
• Scripting experience with Python, PowerShell, Bash, or Perl.
• Experience tuning enterprise detection logic, exclusions, and security tooling.
• Bachelor's degree in a related field or equivalent hands-on experience.
• Certifications such as GCIH, GCFA, GCFE, or CISSP.

Culture & Benefits

• Work in a specialized security operations group addressing complex, high-priority cybersecurity challenges.
• Contribute to mission-critical technology solutions for federal agencies.
• Access company benefits described in the employer's benefits program.
• Work in an environment focused on delivery excellence, innovation, accountability, and professional development.