Cyber Defense Operator | TS/SCI | Incident Response Expert

IPSecure, Inc; San Antonio (TX); On-site; USD 110,000 - 160,000; Full time

Job summary

IPSecure, Inc. seeks a Cyber Defense Operator (CDO) located in San Antonio, TX, with a TS/SCI clearance to monitor and analyze events across host and network systems.

You will correlate data to protect AF networks, open intrusion investigations, and support law enforcement and counter-intelligence activities as required. The role requires incident response expertise, 3+ years in cyber security, and the ability to obtain GCFA certification within 120 days.

Qualifications

• Active TS/SCI clearance required.
• IAT Level II certification (e.g., CompTIA Security+) required or to be obtained.
• Ability to obtain CSSP Incident Responder (GCFA) within 120 days of hire.

Responsibilities

• Complete incident response processes (preparation, identification, containment, eradication, recovery, lessons learned).
• Open network intrusion investigations to validate unauthorized activity and determine scope.
• Provide AF OSI DCO technical support to law enforcement and counter-intelligence as needed.
• Participate in lessons learned meetings and briefings.
• Support planned and same-day Incident Response deployments.
• Analyze host DCO events to assess need for higher level analysis and initial intrusion assessment.
• Conduct cyber investigations to identify threat vectors, scope, containment, and remediation actions.
• Prepare and review IRFs for security incidents with accurate technical detail.

Skills

Incident response

Cyber security

Log analysis

Communication

Education

IAT Level II cert (e.g., CompTIA Security+)

CSSP Incident Responder (GCFA) cert

Tools

JEMS

Job description

IPSecure, Inc. seeks a Cyber Defense Operator (CDO) located in San Antonio, TX, with a TS/SCI clearance to monitor and analyze events across host and network systems.

You will correlate data to protect AF networks, open intrusion investigations, and support law enforcement and counter-intelligence activities as required. The role requires incident response expertise, 3+ years in cyber security, and the ability to obtain GCFA certification within 120 days.