Incident Response (IR) and Forensics Lead (Q Clearance) with Security Clearance

ShorePoint, LLC; Germantown (MD); On-site; USD 120,000 - 180,000; Full time

Job summary

ShorePoint, LLC seeks an Incident Response (IR) and Forensics Lead to manage day-to-day IR/forensics operations and perform hands-on investigations. You will coordinate IR activities, brief customers and federal leadership, and analyze intrusion artifacts to support mitigation across the enterprise.

The role requires 7+ years of experience and current DOE Q or equivalent DoD Top Secret clearance. Onsite work in Germantown, MD is expected.

Qualifications

• Knowledge of IR and digital forensics principles and practices.
• Understanding of cybersecurity operations, including cloud security, endpoint security, access management and secure networking.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.

Responsibilities

• Manage day-to-day operations of the IR and forensics team.
• Conduct briefings, coordinate directly with customers and develop IRs for senior federal leadership.
• Collect and analyze intrusion artifacts to support mitigation of cyber incidents.
• Coordinate and provide expert technical support to enterprise-wide cyber defense technicians.
• Coordinate IR functions across the organization.
• Monitor external data sources to support IR activities.

Skills

IR principles

Digital forensics

Cybersecurity operations

Critical thinking

Education

Bachelor’s degree or Associate’s degree plus 2+ years of experience

Job description

Who we are:

ShorePoint is a fast-growing, industry-recognized and award-winning cybersecurity services firm focused on high-profile, high-threat public and private sector customers who demand experience and proven security models to protect their data. We embrace a “work hard, play hard” mentality and celebrate individual and company successes. We are passionate about our mission and going above and beyond to deliver for our customers, while fostering an environment that supports creativity, accountability, mission success, critical thinking and a desire to give back to our community.

The Perks:

As recognized members of the Cyber Elite, we work together in partnership to defend our nation’s critical infrastructure while building meaningful and exciting career development opportunities in a culture tailored to the individual’s technical and professional growth. We are committed to the belief that our team members do their best work when they are happy and well cared for. In support of this philosophy, we offer a comprehensive benefits package, major carriers for healthcare providers. Highlighted benefits include 144 hours of PTO, 11 holidays, 85% of insurance premiums covered, a 401(k), continuing education, certification maintenance and reimbursement and more.

Who we’re looking for:

We are seeking an Incident Response (IR) and Forensics Lead to manage day-to-day team operations while performing hands-on cyber incident investigations, forensic analysis and response activities. This role provides technical support across cybersecurity areas including cloud security, endpoint security, access management, secure networking and IR. The IR and Forensics Lead position coordinates IR activities, provides technical support across the enterprise and communicates incident findings and responses to customers and federal leadership. This is a unique opportunity to shape the growth, development and culture of an exciting and fast-growing company in the cybersecurity market.

What you’ll be doing:

• Manage day-to-day operations of the IR and forensics team.
• Conduct briefings, coordinate directly with customers and develop IRs for senior federal leadership.
• Collect and analyze intrusion artifacts, including source code, malware and trojans, to support mitigation of potential cyber defense incidents across the enterprise.
• Coordinate and provide expert technical support to enterprise-wide cyber defense technicians to resolve cyber defense incidents.
• Coordinate IR functions.
• Monitor external data sources, including cyber defense vendor sites and Computer Emergency Response resources, to support IR activities. What you need to know:
• Knowledge of IR and digital forensics principles and practices.
• Understanding of cybersecurity operations, including cloud security, endpoint security, access management and secure networking.
• Knowledge of security risk assessment and cyber incident analysis. Must have’s:
• Bachelor’s degree or Associate’s degree plus an additional 2+ years of experience.
• 7+ years of relevant experience.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking.
• Applicants must currently hold and maintain an active DOE Q or equivalent DoD Top Secret clearance. Beneficial to have:
• Industry recognized certifications. Where it’s done:
• Onsite (Germantown, MD).