Cyber Incident Response Specialist

Cypress Consulting; Boston (MA); On-site; USD 159,000 - 227,000; Full time

Job summary

Cypress Consulting in Boston, MA is seeking a Cyber Incident Response Specialist for a hands-on, 6-month onsite contract. You will investigate security alerts, contain threats, support recovery, and improve incident readiness.

You will collaborate with security and IT teams, analyze logs and network data, preserve evidence, document timelines and remediation actions, and communicate findings to technical stakeholders.

Qualifications

• Active Top Secret clearance required.
• Hands-on incident response or security operations experience.
• Experience with SIEM, EDR and network analysis tools.
• Working knowledge of Windows and Linux, networking, and attacker techniques.
• Strong troubleshooting, documentation and communication skills.
• Ability to work onsite in the Boston, MA area for the 6-month engagement.

Responsibilities

• Investigate security alerts and suspected compromises across networks, endpoints, and systems.
• Analyze logs, network traffic, and endpoint evidence to determine incident scope and impact.
• Coordinate containment, eradication, and recovery activities.
• Preserve evidence and document investigation findings, timelines, and remediation actions.
• Communicate incident status and recommendations to technical teams and stakeholders.
• Help maintain response playbooks and conduct post-incident reviews.

Skills

Top Secret clearance

Incident response / security ops

SIEM

EDR tools

Network analysis

Windows

Linux

Documentation

Communication

Onsite work

Tools

SIEM tools

EDR tools

Network analysis tools

Job description

Onsite, Boston, MA area Contract · $140/hour C2C Project: 6 months Clearance: Top Secret

Role overview

We are seeking a Cyber Incident Response Specialist to investigate and respond to cybersecurity incidents. This hands-on role will work with security and IT teams to contain threats, support recovery, and improve incident response readiness.

Responsibilities

• Investigate security alerts and suspected compromises across networks, endpoints, and systems.
• Analyze logs, network traffic, and endpoint evidence to determine incident scope and impact.
• Coordinate containment, eradication, and recovery activities.
• Preserve evidence and document investigation findings, timelines, and remediation actions.
• Communicate incident status and recommendations to technical teams and stakeholders.
• Help maintain response playbooks and conduct post-incident reviews.

Required qualifications

• Active Top Secret security clearance.
• Hands-on experience in cybersecurity incident response or security operations.
• Experience with SIEM, endpoint detection and response, and network analysis tools.
• Working knowledge of Windows, Linux, networking, and common attacker techniques.
• Strong troubleshooting, documentation, and communication skills.
• Ability to work onsite in the Boston, MA area for the 6-month engagement.

Preferred qualifications

• Digital forensics or malware analysis experience.
• Familiarity with NIST incident response guidance and MITRE ATT&CK.
• Relevant certifications such as GCIH, GCFA, or comparable credentials.