Cyber Defense Operator (TS/SCI) - Incident Response Expert

IPSECURE, INC.; San Antonio (TX); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Unlimited vacation

Sick leave

Paid holidays

Education reimbursement

401(k) plan

Legal plan

ID protection

Accident insurance

Critical illness insurance

Hospital indemnity insurance

Job summary

IPSecure in San Antonio, TX is seeking a Cyber Defense Operator (CDO) to join our defensive operations team. The role focuses on accurate event analysis, intrusion investigations, and timely reporting to protect Air Force networks.

You will lead incident response steps, generate IRFs and MISREPs, coordinate with law enforcement, and develop containment and remediation actions. A TS/SCI clearance is required for this position.

Qualifications

• GCFA certification within 120 days of hire.
• 3+ years of cyber security/technical experience preferred.

Responsibilities

• Perform incident analysis to identify intrusions using host, network, and log data.
• Open investigations to validate unauthorized activity and determine impact.
• Generate IRFs for security incidents and MISREPs for knowledge transfer.
• Support incident response deployments and coordinate with AFOSI as required.
• Provide CDO support to law enforcement and counter‑intelligence agencies when needed.
• Develop and brief incident response plans and TTPs.
• Contribute to lessons learned meetings and briefings.

Education

GCFA Certification

Job description

IPSecure in San Antonio, TX is seeking a Cyber Defense Operator (CDO) to join our defensive operations team. The role focuses on accurate event analysis, intrusion investigations, and timely reporting to protect Air Force networks.

You will lead incident response steps, generate IRFs and MISREPs, coordinate with law enforcement, and develop containment and remediation actions. A TS/SCI clearance is required for this position.