Cyber Incident Response Specialist; Top Secret

Cyber Incident Response Specialist

Hanscom AFB, MA

Top Secret Clearance required

We are seeking a Cyber Incident Response Specialist to investigate and respond to cybersecurity incidents. This hands‑on role will work with security and IT teams to contain threats, support recovery, and improve incident response readiness.

• Investigate security alerts and suspected compromises across networks, endpoints, and systems.
• Analyze logs, network traffic, and endpoint evidence to determine incident scope and impact.
• Coordinate containment, eradication, and recovery activities.
• Preserve evidence and document investigation findings, timelines, and remediation actions.
• Communicate incident status and recommendations to technical teams and stakeholders.
• Help maintain response playbooks and conduct post‑incident reviews.

• Active Top Secret security clearance.
• Hands‑on experience in cybersecurity incident response or security operations.
• Experience with SIEM, endpoint detection and response, and network analysis tools.
• Working knowledge of Windows, Linux, networking, and common attacker techniques.
• Strong troubleshooting, documentation, and communication skills.
• Ability to work onsite in the Boston, MA area for the 6‑month engagement.

• Digital forensics or malware analysis experience.
• Familiarity with NIST incident response guidance and MITRE ATT&CK.
• Relevant certifications such as GCIH, GCFA, or comparable credentials.

#M1

#LI-VH1

: #851-Rockville-S1