Incident Response Team Lead

JOB DUTIES AND RESPONSIBILITIES

Drive the incident response lifecycle to include incident detection, analysis, escalation, and coordinated response across all CSOC functions. Develop and standardize incident response runbooks, playbooks, and communication protocols; ensure proper evidence handling and thorough documentation. Monitor and improve key performance metrics (MTTA/MTTR); capture lessons learned and implement corrective actions to strengthen future response efforts.

QUALIFICATIONS Required Certifications

Certified Information System Security Professional (CISSP) and

One or more of the following certifications

GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Incident Handler (GCIH); GIAC Certified Forensic Analyst (GCFA); SANS GIAC Certified Enterprise Defender (GCED) or

Other Information Assurance Technician (IAT) Level III certification in accordance with DoD Directive 8570.1.

Education, Background, and Years of Experience

Bachelor of Science in computer science, engineering, STEM or cybersecurity IT or cyber security (or eight (8) years of relevant work experience in lieu of a degree).

ADDITIONAL SKILLS & QUALIFICATIONS

Required Skills

Five (5) years of progressive professional experience in incident response role, SOC analyst role with emphasis in cyber security issues, incidents, hunts or digital forensics and operations, and computer incident response lifecycle.

Candidates must also exhibit proficient use of cyber tools, including but not limited to Security Information and Event Management (SIEM), network analysis, live response, endpoint detection and response tools, Intrusion Prevention / Detections Systems (IPS / IDS) and CSOC ticketing platforms.

Preferred Skills

One or more of the following GFCA, GPEN, GREM, GFNA, GIAC

Familiarity with Cloud environments

WORKING CONDITIONS

Environmental Conditions

Hybrid onsite in Reston, VA…