Cybersecurity Analyst / Incident Response Coordinator (On-Site)

Oxley Enterprises, Inc.; Alexandria (VA); On-site; USD 101,526 - 132,689; Full time

Benefits offered by this job

Health insurance

Life Insurance

Disability insurance

401(k) plan

Job summary

Oxley Enterprises, Inc. in Alexandria, VA is seeking a Cybersecurity Analyst / Incident Response Coordinator to oversee incident response, vulnerability management, and threat analysis for a federal agency's IT security program. This role combines hands-on cyber and incident lifecycle management.

You will lead security operations, coordinate a team, and produce leadership reports while maintaining plans, policies, and compliance.

Qualifications

• Oversee the incident response lifecycle from detection to remediation.
• Experience with SIEM and SOAR platforms.
• Lead vulnerability management and scanning operations (e.g., Tenable).
• Translate incident data into leadership-ready trend reports.
• Strong verbal and written communication skills.
• Experience supporting a federal agency preferred.

Responsibilities

• Verifies support staff are meeting contract deliverables and services.
• Develops monthly, weekly, and ad hoc status reports for leadership.
• Maintains project plans tracking risks, issues, and tasks.
• Briefs leadership monthly and attends cyber-related meetings.
• Develops and maintains the Incident Response Plan.
• Coordinates with cyber operations to remediate vulnerabilities.
• Tracks vulnerability trends and reports metrics.
• Integrates automated threat intelligence into the Enterprise SIEM.

Skills

Incident response lifecycle

SIEM

SOAR

Containment strategy

Vulnerability management

Team management

Compliance

Incident reporting

Communication

Federal agency experience

Education

Bachelor's Degree in Cybersecurity, Information Technology, or a related field

Tools

Tenable

Splunk

IBM BigFix

Job description

Position Description

We are seeking a Cybersecurity Analyst / Incident Response Coordinator to oversee incident response, vulnerability management, and threat analysis for a federal agency's IT security program. This role combines hands‑on cyber and incident lifecycle management.

Location

Executive Office for Immigration Review, 4825 Mark Center Drive, Suite 200, Alexandria, VA 22311

Essential Qualifications

• Excellent experience providing oversight for the entire incident response lifecycle from initial detection to final remediation and incident closure
• Excellent experience with Security Information and Event Management (SIEM) tools
• Excellent experience with Security Orchestration, Automation, and Response (SOAR) platforms
• Above average experience providing final decisions on technical containment strategies
• Above average experience overseeing vulnerability management and scanning operations (e.g., Tenable)
• Above average experience managing daily tasking of a team
• Above average experience ensuring compliance with applicable retention policies
• Above average experience translating incident data into high‑level trend analysis and status reports for leadership
• Excellent verbal and written communication skills
• Experience supporting a federal agency (preferred)

Minimum Experience

3‑10 years of cyber incident response experience

Minimum Education

Bachelor's Degree in Cybersecurity, Information Technology, or a related field

General Physical Requirements

• Assignment Location – Executive Office for Immigration Review, 4825 Mark Center Drive, Suite 200, Alexandria, VA 22311
• Sedentary Work – Exerting up to 10 lbs of force occasionally or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects.
• Typing, communicating, repetitive motions.
• Close visual acuity to prepare and analyze data, view computer monitors and read. May need to view presentation screens and other visual aids in a virtual setting.
• Inside environmental conditions with protection from outside elements.

Security

• Ability to obtain/maintain a Federal Civilian Public Trust
• U.S. Citizenship or Permanent Resident who has lived in the United States for at least 3 years.
• Security investigations include: 10‑year period coverage, OPM Security Investigations Index (SII), DOD Defense Central Investigations Index (DCII), National Agency Check (NAC) records, FBI name check, FBI fingerprint check, Credit report check, written inquiries to previous employers and references, potential interviews, law enforcement check, court records check, education check – attendance and degrees.

Tasks/Activities

• Verifies support staff are meeting contract deliverables and services
• Identifies obstacles preventing support staff from performing their responsibilities and addresses them
• Develops and provides monthly, weekly, and ad hoc status reports to leadership
• Maintains project plans tracking risks, issues, and completed/upcoming tasks
• Briefs leadership monthly and attends all cyber‑related meetings
• Develops and maintains an Incident Response Plan
• Provides incident response support
• Alerts the Incident Response Team of security advisories, vulnerabilities, and new threats
• Analyzes incidents and briefs recommendations quarterly to leadership
• Records and catalogs lessons learned, maintaining a searchable repository
• Conducts investigation and analysis of cybersecurity incidents
• Develops and maintains the Vulnerability Management Plan and related SOPs
• Conducts risk and vulnerability assessments using tools such as Tenable, IBM BigFix, and Splunk
• Oversees creation and accurate documentation of Plan of Action and Milestones (POA&Ms)
• Coordinates with the cyber operations team to remediate identified vulnerabilities
• Tracks and reports vulnerability trends, providing monthly, quarterly, and annual metrics
• Integrates automated threat intelligence feeds into the Enterprise SIEM
• Analyzes threats against the environment and provides cyber situational awareness
• Oversees insider threat investigations and manages the tool in accordance with ITIL‑compliant Service Level Agreements (SLAs)

Compensation & Benefits

The annual projected pay range for this position is $101,526 - $132,689 with consideration given to various factors including but not limited to qualifications, experience, job responsibilities, and geographic location.

• Medical, dental, vision, and prescription drug coverage for employee and family
• Life Insurance, short‑term disability and long‑term disability paid by the Company
• Supplemental coverages including Accident, Critical Illness, and Hospital
• Additional Life insurance coverage for employee and dependents
• 401(k) plan with various options to select based on retirement goals

Acceptable Credentials

Acceptable Credentials

EEO Statement

All qualified applicants will receive consideration for employment without regard to any status protected by applicable federal, state, or local law.

Accommodations

If you require a reasonable accommodation to apply, please send an email to our Human Resources Department at [e-mail] with the following information:

• Subject line: Accommodation Request
• Description of accommodation request
• Contact information: Full name, email address, best number to reach you (optional)

E-Verify

We participate in the E‑Verify program. http://www.dhs.gov/E-Verify