Cyber Shift Incident Manager (Cybersecurity)

TL;DR

Cyber Shift Incident Manager (Cybersecurity): Leading onsite incident response for U.S. Government agencies to investigate and resolve cyber-attacks with an accent on CND triage, breach characterization, and mitigation planning. Focus on correlating incident data, implementing defense-in-depth principles, and maintaining security robustness for critical assets.

Location: Onsite (USA), must have U.S. Citizenship and active TS/SCI clearance

Company

Small business specializing in IT, Cybersecurity, and Information Assurance for Federal, State, and Local agencies.

What you will do

• Correlate incident data to identify trends and recommend defense-in-depth practices.
• Perform Computer Network Defense (CND) incident triage to determine scope, urgency, and potential impact.
• Detect and defend against intrusions in large-scale IT networks through log analysis.
• Track and document CND incidents from initial detection to final resolution.
• Monitor external data sources to maintain current threat conditions and evaluate enterprise impact.

Requirements

• U.S. Citizenship and active TS/SCI clearance required.
• Must be able to obtain DHS Suitability.
• 5+ years of experience in cyber incident management or cybersecurity operations.
• Proficiency with NIST 800-62 and FISMA standards as they pertain to incident reporting.
• Knowledge of the NCCIC National Cyber Incident Scoring System and general attack stages.
• BS in Cybersecurity, Incident Management, or related degree (or HS Diploma with 7-9 years experience).

Nice to have

• Certifications: GCIH, GCFA, GISP, GCED, CCFP, or CISSP.

Culture & Benefits

• 95% employer-paid medical, dental, and vision coverage.
• 100% employer-paid life, STD, and LTD disability coverage.
• 401k with company match and profit sharing.
• 11 standard holidays and 3 weeks of annual leave.
• Flexible Spending Account (FSA) for dependent and health care.