Cyber Incident Response Shift Lead, Tier 2

Peraton; Beltsville (MD); On-site; USD 104,000 - 166,000; Full time

Job summary

Peraton seeks an experienced Tier 2 Cyber Incident Response Team (CIRT) Shift Lead for its Federal Strategic Cyber Mission program in Beltsville, MD. The role is on-site with day shifts and a 06:00–14:00 schedule, Tue–Sat, supporting 24x7x365 incident response and coordination with CISA and other CIRTs.

The ideal candidate has extensive incident response experience, strong SIEM/EDR and SOAR skills, and active Secret clearance. Bachelor's degree or higher with related certifications is required.

Qualifications

• Bachelor’s degree and 9+ years of relevant experience; Master’s 7+ years; PhD 4+ years. In lieu of a bachelor’s, 4 years additional experience considered.
• Must possess or obtain at least one listed certification and maintain it throughout employment.
• Experience across the incident response lifecycle with SOAR, SIEM, and EDR solutions.

Responsibilities

• Detect, classify, process, track, and report on cyber security events and incidents.
• Perform advanced analysis of Tier 1 alerts in a 24x7x365 environment.
• Analyze logs from multiple sources to identify and remediate threats.
• Characterize network traffic for anomalous activity and threats.
• Perform forensic analysis of hosts, traffic, and email content.
• Collaborate with government teams to analyze and respond to events.
• Monitor and respond to SOAR platforms and inboxes; create tickets and workflows.
• Coordinate and report incident information to CISA and other CIRTs.
• Lead Tier 2 shift activities and contribute to remediation strategies.

Skills

Incident response lifecycle

Log analysis

Threat hunting

SOAR familiarity

Team leadership

CIRT coordination

MITRE ATT&CK

Threat intelligence analysis

Cloud security monitoring

Citizenship & clearance

Education

Bachelor’s degree

Master’s degree

PhD

Tools

Splunk

Microsoft Sentinel

SIEM (QRadar/Elastic)

EDR tools

SOAR platforms (ServiceNow, Splunk SOAR, MS Sentinel)

NIST/MITRE frameworks

KAPE/Forensics tools

Python/PowerShell

Job description

Peraton seeks an experienced Tier 2 Cyber Incident Response Team (CIRT) Shift Lead for its Federal Strategic Cyber Mission program in Beltsville, MD. The role is on-site with day shifts and a 06:00–14:00 schedule, Tue–Sat, supporting 24x7x365 incident response and coordination with CISA and other CIRTs.

The ideal candidate has extensive incident response experience, strong SIEM/EDR and SOAR skills, and active Secret clearance. Bachelor's degree or higher with related certifications is required.