Incident Response (IR) and Forensics Lead (Q Clearance)

ShorePoint; Germantown (MD); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

144 hours PTO

11 holidays

85% insurance premiums covered

401(k)

Continuing education

Job summary

ShorePoint is seeking an Incident Response (IR) and Forensics Lead to manage day-to-day team operations and perform hands-on investigations, forensic analysis, and response activities. You will provide technical support across cloud, endpoint, access management, and secure networking disciplines, coordinating IR efforts with customers and federal leadership.

This onsite role in Germantown, MD requires a DOE Q or equivalent clearance and a track record of translating complex requirements into

Qualifications

• Knowledge of IR and digital forensics principles and practices.
• Understanding of cybersecurity operations including cloud, endpoint, access management and secure networking.
• Experience translating complex requirements into actionable tasks and processes.

Responsibilities

• Manage day-to-day operations of the IR and forensics team.
• Coordinate with customers and provide briefings for leadership.
• Analyze intrusion artifacts to support mitigation of cyber defense incidents.
• Provide expert technical support across enterprise cyber defense functions.
• Coordinate IR functions and monitor external cyber threat data sources.

Skills

IR & forensics

Cybersecurity ops

Incident analysis

Team leadership

Education

Bachelor’s degree or Associate’s +2 years

Job description

Who we are:

ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a “work hard, play hard” mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community.

The Perks:

As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual’s technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, major carriers for healthcare providers. Highlighted benefits include 144 hours of PTO, 11 holidays, 85% of insurance premiums covered, a 401(k), continuing education, certification maintenance and reimbursement and more.

Who we’re looking for:

We are seeking an Incident Response (IR) and Forensics Lead to manage day-to-day team operations while performing hands‑on cyber incident investigations, forensic analysis and response activities. This role provides technical support across cybersecurity areas including cloud security, endpoint security, access management, secure networking and IR. The IR and Forensics Lead position coordinates IR activities, provides technical support across the enterprise and communicates incident findings and responses to customers and federal leadership. This is a unique opportunity to shape the growth, development and culture of an exciting and fast‑growing company in the cybersecurity market.

What you’ll be doing:

• Manage day-to-day operations of the IR and forensics team.
• Conduct briefings, coordinate directly with customers and develop IRs for senior federal leadership.
• Collect and analyze intrusion artifacts, including source code, malware and trojans, to support mitigation of potential cyber defense incidents across the enterprise.
• Coordinate and provide expert technical support to enterprise-wide cyber defense technicians to resolve cyber defense incidents.
• Coordinate IR functions.
• Monitor external data sources, including cyber defense vendor sites and Computer Emergency Response resources, to support IR activities.

What you need to know:

• Knowledge of IR and digital forensics principles and practices.
• Understanding of cybersecurity operations, including cloud security, endpoint security, access management and secure networking.
• Knowledge of security risk assessment and cyber incident analysis.

Must have’s:

• Bachelor’s degree or Associate’s degree plus an additional 2+ years of experience.
• 7+ years of relevant experience.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Applicants must currently hold and maintain an active DOE Q or equivalent DoD Top Secret clearance.

Beneficial to have:

• Industry recognized certifications.

Where it’s done:

• Onsite (Germantown, MD).