Incident Response and Forensics Lead
Listed on 2026-08-30
-
IT/Tech
Cybersecurity, Information Security & Data Protection, IT Support, Network Security
Clear Focus Technologies ,a HUBZone certified company, is located in Leesburg, VA.We specialize in cybersecurity and support multiple government and commercial clients fora variety of missions.
Wevalue our clients, integrity and employees and believe a single person can make a difference!
We are committed to attracting and retaining the best and brightest talent who desire to work with industry leading technology to stay on top of their profession.
We provide an excellent benefit package which includes medical, dental, vision, paid time off,401(k),paid professional development reimbursement and more!
Incident Response & Forensics Lead: 'This is a hands-on role, responsible for managing a team and performing investigations, analysis, and responses to cyber incidents. This person must be able to work on-site . This role provides technical support in areas of cyber security to include cloud security, endpoint security, access management, secure networking and incident response. We need someone with cyber incident investigation and forensics experience (GCFE, GCIH or CySA);
experience with Magnet / Graykey and Encase / Cellebrite tooling is an important value add. The ideal candidate will have a background in incident handling and forensics that has been matured into a mid-level PM.'
- Manage day to day operations of the team
- Perform briefings, direct coordination with the customer, develop responses to incidents to upper Federal Leadership
- Collect intrusion artifacts (e.g., source code, malware, trojans) and use discovered data to enable mitigation of potential cyber defense incidents within the enterprise.
- Coordinate and provide expert technical support to enterprise-wide cyber defense technicians to resolve cyber defense incidents.
- Coordinate incident response functions.
- Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response
- Cybersecurity Operations, Security Risk Assessment
- 7+ years of related experience with a bachelor or higher degree or an additional 3 years of experience can be substituted with an associate degree
- Active Top Secret clearance, Q clearance processing
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).