Cyber Defense Incident Responder — Threat Hunting & IR

World Wide Technology, Inc.; San Antonio (TX); On-site; USD 110,000 - 130,000; Full time

Benefits offered by this job

Health and Wellbeing: Health, Dental,

Onsite Health Centers

Employee Assistance Program

Wellness program

401k Plan with Company Matching

Life and Disability Insurance

Tuition Reimbursement

PTO and Holidays

Parental Leave

Military Leave

Bereavement

Nursing Mothers Benefits

Pet Insurance

Employee Discount Program

Job summary

World Wide Technology, Inc. is seeking a Mid Cyber Defense Incident Responder to support the 33 Cyber Operations Squadron (33 COS) in providing incident response on alerts from systems aligned to the CSSP. The role requires 4+ years of hands-on incident handling, forensics, and cyber defense experience.

Location: San Antonio, TX on-site. Must hold Top Secret/SCI clearance with potential for higher read-ins.

Qualifications

• Bachelor's degree in cybersecurity, CS or related field.
• IAT II 8140 and GCFA certifications are required or strongly preferred.
• Top Secret/SCI clearance with potential for higher read-ins.
• Strong knowledge of networking, risk management, and cyber laws.

Responsibilities

• Analyze malicious activity to identify weaknesses and methods.
• Characterize network traffic to detect threats.
• Correlate data across diverse sources for incident context.
• Coordinate with CSSP cyber defense staff to validate alerts.
• Document incidents and escalate where needed.
• Identify anomalies in network traffic via metadata.
• Determine OS and applications from network traffic.
• Conduct cyber defense trend analysis and reporting.
• Perform event correlation to assess attack effectiveness.
• All other duties as defined by CSSP.

Skills

Incident handling

Cyber threat hunting

Digital forensics

Cyber defense

Networking concepts

Risk management

Laws & ethics

IT security principles

Vulnerability assessment tools

DPI & traffic analysis

Education

Bachelor’s Degree in Cybersecurity/CS or related field

IAT II 8140 Certification

GIAC GCFA Certification

Top Secret/SCI clearance

Tools

Zeek

Wireshark

NetFlow

PCAP replay environments

Palo Alto XOAR playbooks

Job description

World Wide Technology, Inc. is seeking a Mid Cyber Defense Incident Responder to support the 33 Cyber Operations Squadron (33 COS) in providing incident response on alerts from systems aligned to the CSSP. The role requires 4+ years of hands-on incident handling, forensics, and cyber defense experience.

Location: San Antonio, TX on-site. Must hold Top Secret/SCI clearance with potential for higher read-ins.