Cyber Incident Response: Tier 2 Shift Lead

AGR, LLC; Beltsville (MD); On-site; USD 120,000 - 180,000; Full time

Job summary

ICS (a REDHAWK company) seeks an experienced Tier 2 Cyber Incident Response Team Shift Lead in Beltsville, MD to join the Federal Strategic Cyber Mission program. You will lead Tier 2 shift operations, review tickets for accuracy, and coordinate with CIRT Watch Officers and government leadership on remediation actions.

Responsibilities include advanced log analysis across multiple sources, malware analysis, IOC generation, and collaboration with DoS and CISA.

Qualifications

• Bachelor’s degree or higher with relevant incident response experience.
• Experience across the incident response lifecycle and 24x7 operations.
• Active security clearance or ability to obtain one (Secret or higher).
• Experience with SOAR platforms and automated response workflows.

Responsibilities

• Detect, classify, process, and report cyber security events and incidents.
• Perform in-depth analysis of Tier 1 triage and requests.
• Analyze logs from hosts, EDR, firewalls, IDS, and servers to contain threats.
• Characterize network traffic to identify anomalies and threats.
• Collaborate with DoS/CISA and other CIRTs on incidents and remediation.
• Monitor SOAR platform, tickets, and SOP workflows.

Skills

Incident response

SOAR platforms

SIEM operations

EDR tools

Threat hunting

CISA coordination

Education

Bachelor’s degree

Master’s degree

Tools

Splunk

Microsoft Sentinel

Elastic

QRadar

ServiceNow SOAR

Job description

ICS (a REDHAWK company) seeks an experienced Tier 2 Cyber Incident Response Team Shift Lead in Beltsville, MD to join the Federal Strategic Cyber Mission program. You will lead Tier 2 shift operations, review tickets for accuracy, and coordinate with CIRT Watch Officers and government leadership on remediation actions.

Responsibilities include advanced log analysis across multiple sources, malware analysis, IOC generation, and collaboration with DoS and CISA.