Head of Federal Incident Response

Evolver Federal; Washington (District of Columbia); On-site; USD 150,000 - 190,000; Full time

Job summary

Evolver Federal in Washington, DC seeks a Lead Incident Responder to serve as the central point of accountability for day-to-day incident response operations across a government contract. You will coordinate with SOC, ISSOs, and AOs to ensure rapid detection, containment, and recovery, while aligning with NIST RMF, FISMA, and other federal frameworks.

This role emphasizes measurable outcomes such as MTTR reduction, compliance reporting, and tabletop exercises.

Qualifications

• Bachelor's degree and 6+ years of technical IT experience with 4+ years in senior IT leadership in government or large-scale environments.
• CISSP and relevant incident response certifications.
• PMP and ITIL 4 Foundation highly recommended.
• 10 years of enterprise IT experience, last 5 on government BPAs/contracts.
• U.S. Citizen capable of passing a government background check.

Responsibilities

• Lead end-to-end incident response activities including detection, triage, containment, eradication, and recovery.
• Direct investigations of advanced threats (APTs, ransomware, insider threats).
• Lead tabletop exercises and incident simulations for federal agencies.
• Coordinate with SOC analysts, engineering teams, and federal stakeholders during major incidents.
• Develop and maintain incident response playbooks, escalation procedures, and forensic methodologies.
• Ensure alignment with Zero Trust Architecture principles and federal frameworks.

Skills

Incident leadership

Threat hunting

Stakeholder communication

Mentoring

Cross-functional teamwork

Education

Bachelor's degree in CS/IT/Engineering

CISSP

PMP

ITIL 4 Foundation

Master's degree

CISM

GIAC GCFA/GCIH

Tools

Splunk

Elastic

Cortex XSOAR

CrowdStrike

Microsoft Defender

Job description

Evolver Federal in Washington, DC seeks a Lead Incident Responder to serve as the central point of accountability for day-to-day incident response operations across a government contract. You will coordinate with SOC, ISSOs, and AOs to ensure rapid detection, containment, and recovery, while aligning with NIST RMF, FISMA, and other federal frameworks.

This role emphasizes measurable outcomes such as MTTR reduction, compliance reporting, and tabletop exercises.