Cyber Incident Response Lead (TS/SCI)

DigiFlight, Inc.; Columbia (MD); On-site; USD 110,000 - 170,000; Full time

Benefits offered by this job

Health benefits

PTO

Holidays

Tuition assistance

Professional development

401(k)

Life insurance

Disability insurance

Referral program

Marketing incentives

Job summary

DigiFlight, Inc. in Arlington, VA seeks an Incident Manager II to help defend enterprise networks and coordinate incident response. The role involves researching mitigation steps, applying threat intel, and analyzing logs to detect intrusions.

The candidate will monitor diverse data sources, determine incident causes, and coordinate with multiple teams to resolve incidents across locations. A strong security background and collaboration skills are essential.

Qualifications

• U.S. citizenship required.
• Active TS/SCI clearance required.
• DHS suitability must be obtainable.
• 2+ years in cyber incident management or cybersecurity operations.
• Knowledge of incident response methodologies.
• Knowledge of NCCIC scoring system for triage prioritization.
• Understanding of attack stages and vulnerabilities.
• Ability to work across physical locations.

Responsibilities

• Research and compile known resolution steps to mitigate incidents.
• Apply TTP knowledge to identify and validate threats.
• Analyze log data for intrusion detection and defense.
• Monitor external data sources to stay current on CND threats.
• Identify root cause and learn background from external entities.
• Coordinate information on incidents with internal teams and externals.
• Provide support during assigned shifts.

Skills

Incident management

Cybersecurity operations

Threat analysis

Log analysis

Cross-location collaboration

Education

Bachelor's degree in a related field

HS diploma with 4–6 years experience

Tools

NCCIC National Cyber Incident Scoring System

Job description

DigiFlight, Inc. in Arlington, VA seeks an Incident Manager II to help defend enterprise networks and coordinate incident response. The role involves researching mitigation steps, applying threat intel, and analyzing logs to detect intrusions.

The candidate will monitor diverse data sources, determine incident causes, and coordinate with multiple teams to resolve incidents across locations. A strong security background and collaboration skills are essential.