Senior Cyber Defense Incident Responder (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Senior Cyber Defense Incident Responder (Cybersecurity): Facilitate enterprise-wide cyber defense incident response, correlate incident data to identify vulnerabilities, and provide expert technical support for remediation. Focus on forensic analysis of logs and artifacts, threat modeling, behavioral analytics, and coordination with stakeholders to mitigate attacks.
Location: On-site in Washington, DC. Active TS/SCI clearance required.
Salary: $60,000–$180,000 USD
Company
provides IT services including cybersecurity, digital transformation, software development, and cloud solutions to the Federal Government and commercial customers.
What you will do
- Facilitate and coordinate cyber defense incident response across the enterprise.
- Correlate incident data, perform triage, and recommend remediation for vulnerabilities and attacks.
- Collect and analyze intrusion artifacts like malware and source code for mitigation.
- Analyze log files and network alerts to identify threats and perform trend reporting.
- Develop threat models, enhance behavioral analytics, and write after-action reviews.
- Monitor external threat sources and assist junior technicians.
Requirements
- Active TS/SCI security clearance.
- Bachelor’s degree in a related field.
- 8+ years of relevant experience (certifications may substitute).
- Proven incident response and forensic investigations in large enterprises, including malware, logs, and network traffic analysis.
- Strong knowledge of cyber threat intelligence, behavioral analytics, and security operations processes.
Culture & Benefits
- Competitive compensation based on experience, skills, and market data.
- Comprehensive benefits package (details at m9solutions.com/why-join-m9/#our-benefits).
- Commitment to veterans, equal opportunity, and diversity.
- Support for military medics, spouses, and dependents via V3 program.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →