Cyber Defense Incident Responder

Job Summary

To support a mission-critical DCSA cybersecurity program, the full-time Cyber Defense Incident Responder will detect, analyze, and respond to security incidents affecting cloud-hosted environments, with remote flexibility and a requirement to be onsite up to one day a week at Fort Meade, MD.

Key Responsibilities:

• Monitor AWS, Azure, and Google Cloud environments for malicious activity and analyze logs to identify indicators of compromise
• Lead incident response activities across the full lifecycle, including identification, containment, and recovery
• Leverage threat intelligence to identify emerging threats and recommend defensive improvements based on observed tactics

Required Qualifications:

• Five years of hands-on cybersecurity experience in incident response or threat hunting within cloud or hybrid environments
• Active Top Secret (TS) Clearance, eligible for upgrade to TS/SCI
• DoD 8570 Information Assurance Program certification at IAT Level II or IAM Level II, with at least one active qualifying certification
• Bachelor's Degree in Cybersecurity, Information Systems Management, or a related field
• Practical experience securing AWS, Azure, and/or Google Cloud environments