Incident Response Lead (Cybersecurity)

TL;DR

Incident Response Lead (Cybersecurity): Leading enterprise cybersecurity incident response operations for the National Institutes of Health (NIH) with an accent on the full IR lifecycle and federal compliance. Focus on coordinating high-impact investigations into APTs, ransomware, and cloud-based threats while ensuring adherence to NIST standards.

Location: Remote (Must be eligible for US Public Trust Clearance)

Company

Professional software and services provider specializing in supporting federal government health agencies.

What you will do

• Lead enterprise-wide cybersecurity incident response operations across NIH information systems.
• Manage the full IR lifecycle, including preparation, identification, containment, eradication, recovery, and post-incident activities.
• Conduct technical investigations into malware infections, ransomware, insider threats, and advanced persistent threats (APTs).
• Coordinate root cause analysis to determine attack vectors and operational impact.
• Prepare executive briefings, after-action reports, and technical findings for Government leadership.
• Oversee incident triage, escalation procedures, and operational communications in coordination with SOC analysts.

Requirements

• Public Trust Clearance or the ability to obtain one.
• 7+ years of experience leading enterprise incident response activities.
• Experience supporting federal cybersecurity programs and Security Operations Centers (SOC).
• Proficiency in implementing NIST incident response methodologies.
• B.S. in Computer Science, Information Technology, or a related field.
• Active certification: GCIH, GCFA, GNFA, CISSP, CEH, CySA+, Security+, CISM, or CCSP.