Назад
Company hidden
3 дня назад

Senior Incident Responder (Cybersecurity)

130 000 - 170 000$
Формат работы
onsite
Тип работы
fulltime
Грейд
senior/lead
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Incident Responder (Cybersecurity): Leading 24x7x365 SOC incident analysis for a large federal agency with an accent on evidence correlation, incident scoping, timeline development, and response recommendations. Focus on analyzing complex enterprise incidents, guiding responders, improving monitoring and escalation procedures, and producing defensible incident reports.

Location: Onsite in New Carrollton, Maryland or Memphis, Tennessee, United States. Requires onsite presence at client facilities as directed.

Salary: $130K–$170K DOE.

Company

hirify.global delivers advanced technology solutions and mission support to federal agencies across civilian, health, and national security environments, including AI/ML, cloud, cybersecurity, and IT modernization capabilities.

What you will do

  • Lead incident analysis in a 24x7x365 Security Operations Center supporting a large federal agency.
  • Assign and review incident responder work and guide responder development.
  • Analyze suspected incidents, affected systems, indicators of compromise, event timelines, operational impact, and likely causes.
  • Correlate logs, alerts, artifacts, reports, threat intelligence, and other approved sources.
  • Document evidence, confidence levels, findings, timelines, and recommended response or remediation actions in Incident Analysis Reports.
  • Coordinate with client IT organizations, contractors, vendors, and authorized stakeholders, and use lessons learned to improve monitoring, triage, escalation, and analysis procedures.

Requirements

  • Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field and 7+ years of relevant professional experience; three additional years of relevant experience may substitute for the degree.
  • Seasoned technical individual contributor, fully proficient in applying technical principles, theories, and concepts in the field.
  • Ability to develop solutions to difficult and unclear technical problems requiring deep technical knowledge.
  • Deep understanding of the principles, theories, and concepts of the technical domain, with broad understanding of related specialty areas.
  • Experience performing in-depth incident analysis in large enterprise environments, including log analysis and IOC correlation.
  • Expertise with SIEM, EDR, and network security monitoring tools.
  • Working knowledge of NIST SP 800-61 and the MITRE ATT&CK framework.
  • Must be a U.S. Citizen and able to obtain a Public Trust clearance.

Nice to have

  • Experience supporting federal government contracts as a contractor, including contract performance standards, deliverable schedules, and government review and approval processes.
  • Certifications such as GCIH, GCIA, GCFA, or CISSP.
  • Experience analyzing incidents in AWS and Microsoft Azure/M365 environments.
  • Experience with SOAR playbooks and automation.

Culture & Benefits

  • Family-focused culture and dynamic, productive work environment.
  • Medical insurance plans, including HSA-eligible options.
  • Employer-paid dental and vision insurance options, plus employer-sponsored short-term disability, long-term disability, and life insurance.
  • 5% 401(k) company matching, paid holidays, PTO accrual plans, and paid parental leave.
  • Flexible schedules, teleworking options, professional development, career growth opportunities, and team events.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →