Incident Response Engineer — Threat Hunting & Forensics

Dunhill Professional Search & Government Solutions; Arlington (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

Dunhill Professional Search & Government Solutions is seeking an Incident Response Engineer Journeyman to detect, triage, and remediate security incidents affecting mission-critical systems in a highly regulated government environment.

You will analyze alerts, lead triage activities, and coordinate containment and recovery with operations, IT, and mission stakeholders. The role emphasizes threat hunting, playbook maintenance, and clear reporting to drive security improvements.

Qualifications

• Bachelor’s degree in Cybersecurity, IT, CS, or related field, or equivalent experience.
• Typically 5–7 years in security operations and incident response in regulated environments.
• Experience triaging alerts, investigating incidents, and supporting containment.
• Hands-on with SIEM platforms and endpoint or network security tools.
• Proven log analysis, basic malware analysis, and evidence preservation skills.
• Active TS/SCI security clearance.
• U.S. citizenship is required to support federal IT environments.

Responsibilities

• Detect, triage, and validate security events from SIEM, endpoint, network, and cloud tools.
• Lead containment and recovery efforts with system owners to minimize mission impact.
• Conduct host and network forensics and malware analysis to determine root cause.
• Maintain incident response playbooks, procedures, and tooling.
• Participate in proactive threat hunting using telemetry and threat intel.
• Tune SIEM rules and tooling to improve detection and reduce noise.
• Generate incident reports, metrics, and post‑incident reviews.
• Support tabletop exercises and incident communications to improve readiness.

Skills

Incident Response

Threat Hunting

Forensics

SIEM Knowledge

Education

Bachelor's degree in Cybersecurity/IT/CS

Tools

Splunk

Elastic

QRadar

Job description

Dunhill Professional Search & Government Solutions is seeking an Incident Response Engineer Journeyman to detect, triage, and remediate security incidents affecting mission-critical systems in a highly regulated government environment.

You will analyze alerts, lead triage activities, and coordinate containment and recovery with operations, IT, and mission stakeholders. The role emphasizes threat hunting, playbook maintenance, and clear reporting to drive security improvements.