Incident Response Senior Analyst; Tier 3

The Role

This senior-level position supports a government CSSP contract, conducting end-to-end cyber incident management from initial detection through resolution. Day-to-day work includes forensic analysis of device memory, file systems and packet captures, log and host artifact review, detection use‑case development, and contributing to the delivery of an internal Incident Response training course.

Candidates must hold at least three years of incident response experience, a DoD 8570 IAT Level II certification, and a CSSP Incident Responder certification (or the ability to obtain within 180 days). An active TS/SCI clearance is required, though candidates with a fully adjudicated Secret clearance may start. Experience with pcap analysis, DFIR tooling, and enterprise network environments is expected.

This role suits an experienced DFIR practitioner comfortable operating in a classified government environment who is ready to take ownership of complex investigations, guide junior analysts, and contribute to training development. Those with a DoD or law enforcement cyber background and existing clearances will be well positioned.