Cyber Incident Responder (24x7 Days)

ASRC Federal; Virginia (MN); On-site; USD 110,000 - 150,000; Full time

Job summary

ASRC Federal is seeking a highly skilled Cyber Incident Responder to join our team for day shift coverage on-site at Quantico, VA. The role requires rapid detection, triage, containment and eradication of cyber threats across the enterprise, coordinating DoD-aligned response actions.

The candidate will work with SIEM, SOAR, CrowdStrike, CyberArk and ESS tools, with weekend/holiday rotations and no telework. Active Top-Secret clearance is required and DoD 8570 certs are expected at hire.

Qualifications

• At least five years of hands-on cybersecurity incident response experience.
• Experience with incident lifecycle, containment, eradication and recovery.
• Familiarity with DoD and government cybersecurity guidelines and policies.

Responsibilities

• Execute full incident response lifecycle during day shift and on-call coverage.
• Detect, triage, contain and eradicate cyber threats across enterprise infrastructure.
• Coordinate recovery efforts and preserve forensic evidence for case management.
• Maintain incident response playbooks and ensure operational readiness.

Skills

Five years experience

Incident response

CSIRT

Communication skills

Tools

SIEM

SOAR

CrowdStrike

CyberArk

Endpoint Security Suite

Job description

Posted Tuesday, August 4, 2026 at 4:00 AM

ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are atop veteran employer and Certified Great Place to Work™

ASRC Federal is seeking a highly skilled and experiencedCyber Incident Responderto join our dynamic team on theday shift ( 0600 – 1600 ), providing extended-hours coverage that includesweekend and holiday rotations. This is afully on-site positionat Quantico Marine Corps Base, VA —no telework is available for this role.

The successful candidate will serve as a front-line defender, rapidly detecting, triaging, containing, and eradicating cyber threats across our enterprise infrastructure. This role is critical for minimizing the impact of security incidents, coordinating response actions, and preserving forensic evidence in support of Department of Defense (DoD) missions.

Position Description:

The Cyber Incident Responder is a vital role responsible for executing the full incident response lifecycle duringday shift, weekend, and holiday coverage windows. This position focuses on detecting and responding to security incidents in real time, performing containment and eradication actions, and coordinating recovery efforts using enterprise tools such asSIEM, SOAR, CrowdStrike, CyberArk, and Endpoint Security Suite (ESS).

The Incident Responder will collaborate with cross-functional IT and security teams to:

• Execute incident response procedures in accordance withNIST SP 800-61and DoD guidelines
• Coordinate with JFHQ-DODIN on cyber incident reporting and remediation
• Support insider threat response and investigations
• Contain and remediate compromised systems, accounts, and endpoints
• Preserve and document forensic evidence for incident case management
• Maintain incident response playbooks and ensure high operational readiness during all covered hours
• At least Five (5) years of hands-on technical cybersecurity experience and knowledge of incident response concepts, Computer Network Defense, DISA Security Technical Implementation Guides (STIGs), DoD A&A Process, NIST SP 800-53, NIST SP 800-61, CJCSM 6510.01B, United States Cyber Command guidelines, and other applicable DoD Cyber Security and Computer Network Defense policies.
• Active Top-Secret Clearance REQUIRED , eligible to be upgraded to TS/SCI.
• Must meetDoD 8570 certification requirements at time of hire—IAT Level II(e.g., CCNA Security, CySA+, GICSP, GSEC, Security+, SSCP);CSIH, GCIH, or GCFA preferredfor incident handling.
• Willingness and availability to work the day shift ( 0600 – 1600 ), including weekend and holiday rotations, fully on-site at Quantico, VA.

Required Skills:

• Knowledge of computer network defense concepts, DISA Security Technical Information Guides, DoD A&A Process, NIST SP 800-53, NIST SP 800-61, CJCSM 6510.01 B, United States Cyber Command guidelines, and other applicable DoD Cybersecurity and Computer Network Defense Policies Cybersecurity and Computer Network Defense policies
• Develop, maintain, and provide a weekly brief that captures all the cyber events including metrics and trends.
• Ability to provide continuous monitoring, data to include but not limited to network and host vulnerability scanning IDS, firewall, network sensor tuning, net flow/packet capture (PCAP). Collect and keep audit data in order to conduct a technical analysis relating to misuse, penetration, or other incidents.
• Document incidents, response actions, and remediation recommendations in accordance with government reporting requirements.
• Monitor multiple environments for malicious or anomalous activity using SIEM, SOAR, and on-prem security tooling.
• Analyze logs, telemetry, alerts, and audit data to identify indicators of compromise (IOCs) and attack patterns.

Work Environment and Physical Demands:

• This is afully on-site positionat DCSA facilities, Quantico Marine Corps Base, VA.Telework is not offered for this shift.
• Must work the assignedday shift (0600 – 1600)and supportweekend and holiday coverageas scheduled.
• Must be able to communicate complex technical ideas to a diverse customer base, both verbally and in written form.

We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.

EEO Statement

ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.