Incident Responder - Tier 2

$ - $ per hour

Job description:

We partner with the US national defense community to create fully integrated, resilient, and innovative digital solutions that enable them to make smart decisions in real-time. We work with our customers on everything from conquering their data to improving and safeguarding IT infrastructure. Our ultimate goal? To enhance our nation's ability to identify, address, and act – no matter what challenges arise.

The Tier 2 Incident Responder performs in-depth investigation, containment, and remediation of security incidents escalated from Tier 1, applying the NIST SP 800-61 incident response life cycle and mentors Tier 1 analysts on investigative technique.

TS/SCI with CI Poly

Ft. Meade, MD (Onsite)

Primary shift assignment within the 24/7/365 coverage model.

• Investigate escalated alerts and incidents through log analysis, malware analysis, and digital forensics, determining scope, root cause, and impact.
• Support execution of containment and eradication actions. Support recovery of affected systems to a known-good, hardened baseline.
• Document incident timelines and findings, create and track POA&M entries to closure and contribute to after-action reviews that feed back into detection content and playbooks.
• Review and remediate findings.
• Provide technical mentorship to Tier 1 Analysts and serve as a secondary escalation point during major incidents or surge conditions.

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field preferred, or equivalent experience; three to five years of hands-on incident response, digital forensics, or security operations experience.

DoD 8570/8140 IAT Level III or CSSP Incident Responder certification (e.g., GCIH, GCFA, or CySA+) required; working knowledge of endpoint detection and response (EDR) tooling, packet analysis, and at least one scripting language (e.g., Python, Power Shell, or Bash) preferred.

$115-$147k based on experience and shift

• Do you have a Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field or equivalent experience?
• So you have three to five years of hands-on incident response, digital forensics, or security operations experience?
• DoD 8570/8140 IAT Level III or CSSP Incident Responder certification (e.g., GCIH, GCFA, or CySA+)?
• Do you have working knowledge of endpoint detection and response (EDR) tooling, packet analysis, and at least one scripting language (e.g., Python, Power Shell, or Bash)?

• Fort Meade, MD 20755 (Required)

In person