Lead Incident Responder

Job Summary

As a full-time remote Lead Incident Responder for the GovCloud Computer Security Incident Response Team (CSIRT), the candidate will manage high-severity security incidents, lead cross-functional responses to critical security issues, and drive process improvements for incident response capabilities.

Key responsibilities

• Manage the response to high-severity security incidents and serve as a technical escalation point for the Incident Responder team
• Lead cross-functional responses to high-priority security issues, including insider investigations and web application attacks
• Drive process improvement and automation for detection and incident response capabilities

Required qualifications

• 8+ years of experience in information security, including operational security monitoring and incident response
• Skills in system forensics and investigation across Windows, Mac OS X, and Linux
• Strong technical understanding of the information security threat landscape and best practices for securing systems
• Ability to communicate effectively with executive leadership, both verbally and in writing
• U.S. citizenship with eligibility for a federal government Minimum Background Investigation (MBI)