Cyber Defense Incident Responder - DoD CSSP On‑Site

World Wide Technology; Mountain Home (TX); On-site; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health benefits

401k matching

Paid time off

Tuition reimbursement

Life and disability insurance

Pet insurance

Job summary

World Wide Technology is seeking a Mid Cyber Defense Incident Responder to support the 33 Cyber Operations Squadron, delivering incident response on alerts from CSSP-aligned systems. This on-site role located in San Antonio, TX requires active TS/SCI clearance and a strong background in cyber defense and forensics.

The candidate will analyze threats, coordinate with defense teams, and document incidents, contributing to mission-critical cyber operations for federal civilian and DoD clients.

Qualifications

• Bachelor’s degree or higher in Cybersecurity, Computer Science or related field.
• 4+ years of incident handling/response experience.
• IAT II 8140 certification or equivalent.
• GCFA certification.
• Security clearance: Top Secret/SCI.
• Strong knowledge of networking concepts and protocols.
• Familiarity with risk management processes and cyber laws/ethics.
• Experience with intrusion detection methodologies and tools.
• Linux incident response and forensics background.
• Experience with DPI, anomaly detection, and traffic pattern analysis (Zeek, Wireshark, NetFlow).

Responsibilities

• Analyze identified malicious activity to determine weaknesses exploited and effects on systems.
• Characterize network traffic to identify anomalies and threats.
• Research and correlate data across multiple data sources.
• Validate network alerts with enterprise cyber defense staff.
• Document incidents with history, status, and impact assessments.
• Identify anomalies in network traffic using metadata.
• Identify devices and OS from network traffic.
• Perform cyber defense trend analysis and reporting.
• Perform event correlation to gain situational awareness of attacks.
• Incorporate data from multiple tools to inform decisions.
• All other duties as defined by CSSP.

Skills

Incident handling/response

Cyber threat hunting

GCFA

IAT II 8140

Top Secret/SCI clearance

Networking concepts

Risk management

Intrusion detection

Linux incident response

Zeek/Wireshark/NetFlow

Education

Bachelor’s degree or higher in Cybersecurity/CS

Tools

Palo Alto XOAR

Zeek

Wireshark

NetFlow

PCAP replay environments

Job description

World Wide Technology is seeking a Mid Cyber Defense Incident Responder to support the 33 Cyber Operations Squadron, delivering incident response on alerts from CSSP-aligned systems. This on-site role located in San Antonio, TX requires active TS/SCI clearance and a strong background in cyber defense and forensics.

The candidate will analyze threats, coordinate with defense teams, and document incidents, contributing to mission-critical cyber operations for federal civilian and DoD clients.