Cyber Defense Incident Responder (Tier 2)

Sentar; Quantico (VA); On-site; USD 90,000 - 140,000; Full time

Benefits offered by this job

Medical, Dental, Vision

401(k) matching

Competitive PTO

Leave programs

Job summary

Sentar is seeking a dedicated Cyber Defense Incident Responder (Tier 2) to join our team for 24/7/365 cybersecurity monitoring and detection for the government enterprise network. You will conduct in-depth cyber investigations and respond to incidents across the enterprise network in a fast-paced, high-impact environment.

The role requires hands-on incident response experience, familiarity with DoD frameworks, and collaboration with multiple stakeholders.

Qualifications

• At least 2+ years in cybersecurity, with hands-on experience in incident response or related roles.
• Familiarity with tools such as Tanium, Elastic/Kibana, and Microsoft Defender for Endpoint.
• Strong understanding of the DoD environment and cybersecurity frameworks.

Responsibilities

• Investigate Cyber Incidents: Perform in-depth analysis of network and host artifacts (e.g., logs, system images, packet captures) to identify root causes, operational impacts, and enable rapid remediation of threats.
• Incident Triage: Assess the scope, urgency, and potential impact of incidents, identify vulnerabilities, and recommend effective mitigation strategies.
• Incident Management: Manage incidents from detection to resolution, documenting actions and outcomes in compliance with DoD Cyber Incident Handling Program (CJCSM 6510.01B).
• Forensics and Threat Analysis: Conduct real-time forensic collections, intrusion correlation, threat analysis, and direct system remediation tasks.
• Collaboration: Work closely with subordinate organizations, law enforcement, and counterintelligence teams on high-profile incidents and insider threat investigations.
• Documentation and Training: Update incident response tactics, techniques, and procedures annually, and deliver quarterly training sessions to enhance team readiness.
• Red Team Interaction: Collaborate with Red Teams to validate and enhance incident response capabilities through realistic penetration testing exercises.
• Quality Assurance: Maintain high standards in incident response, ensuring consistent quality and efficiency as assessed by government-defined metrics.

Skills

Forensic analysis

Threat hunting

Vulnerability assessment

Tools

Tanium

Elastic/Kibana

Microsoft Defender for Endpoint

Job description

Current job opportunities are posted here as they become available.

Subscribe to our RSS feeds to receive instant updates as new positions become available.

Sentar is dedicated to developing the critical talent that the connected world demands to create solutions to address the convergence of cybersecurity, intelligence, analytics, and systems engineering. We invite you to join the small business team where you can build, innovate, and secure your career.

Role Description:

Sentar is seeking a dedicated Cyber Defense Incident Responder (Tier 2) to join our team and provide 24/7/365 cybersecurity monitoring and detection for the government enterprise network. In this role, you will be responsible for conducting in-depth cyber investigations and responding to incidents across the enterprise network. This critical position involves working with advanced tools, engaging with global stakeholders, and ensuring the network's security and operational integrity. This is a fast-paced and high-impact role in a mission-critical environment.

The selected applicant will perform a variety of activities including but not limited to:

• Investigate Cyber Incidents: Perform in-depth analysis of network and host artifacts (e.g., logs, system images, packet captures) to identify root causes, operational impacts, and enable rapid remediation of threats.
• Incident Triage: Assess the scope, urgency, and potential impact of incidents, identify vulnerabilities, and recommend effective mitigation strategies.
• Incident Management: Manage incidents from detection to resolution, documenting actions and outcomes in compliance with DoD Cyber Incident Handling Program (CJCSM 6510.01B).
• Forensics and Threat Analysis: Conduct real-time forensic collections, intrusion correlation, threat analysis, and direct system remediation tasks.
• Collaboration: Work closely with subordinate organizations, law enforcement, and counterintelligence teams on high-profile incidents and insider threat investigations.
• Documentation and Training: Update incident response tactics, techniques, and procedures annually, and deliver quarterly training sessions to enhance team readiness.
• Red Team Interaction: Collaborate with Red Teams to validate and enhance incident response capabilities through realistic penetration testing exercises.
• Quality Assurance: Maintain high standards in incident response, ensuring consistent quality and efficiency as assessed by government-defined metrics.

Qualifications:

Clearance Level:

• Must obtain and maintain an active Top Secret security clearance with SCI eligibility.
• Can begin this position with verification of adjudicated Secret clerance eligibility.

Certifications:

Experience:

• At least 2+ years in cybersecurity, with hands-on experience in incident response or related roles.
• Familiarity with tools such as Tanium, Elastic/Kibana, and Microsoft Defender for Endpoint.
• Strong understanding of the DoD environment and cybersecurity frameworks.

Skills:

• Expertise in forensic analysis, threat hunting, and vulnerability assessment.
• Excellent problem-solving abilities and attention to detail.
• Strong communication skills for interacting with technical teams, leadership, and external stakeholders.

Benefits at Sentar:

In addition to a great culture, Sentar not only fosters an inclusive work environment but also offers an extensive benefits package designed to cater to the well-being of its employees and their families.

• Voluntary Medical, Dental, Vision, with Health Savings or Flexible Spending Plan options
• Voluntary Life, Critical Illness, Accident, and Long Term Care insurance options
• Group Term Life, Short-Term and Long-Term Disability is provided by Sentar to all qualifying employees
• Generous 401(k) match
• Competitive PTO plan that graduates quickly with years of service
• Other leave programs; holiday schedule along with bereavement, jury and military duty

Sentar is an affirmative Action and Equal Opportunity Employer M/F/Vets/Persons with Disabilities

Build, Innovate, Secure Your Career at Sentar.