Incident Response Lead — Hybrid (TS/SCI)

Quantum Sky; Washington (District of Columbia); Hybrid; USD 135,000 - 145,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

Paid Time Off

STD/LTD/Life Insurance

Referral Bonuses

Professional development reimbursement

Parental leave

Job summary

Quantum Sky is seeking an Incident Response Analyst Shift Lead to support a law enforcement customer in Washington, DC. You will lead a team of IR analysts, triage alerts, and investigate threats, while mentoring Tier 1 and 2 analysts and collaborating with threat intelligence teams.

The role requires strong SOC leadership, experience with SIEM tools (Splunk/Sumo Logic), and cloud security knowledge. This hybrid position involves on-site work two days per week and TS/SCI clearance is expected.

Qualifications

• Minimum of six (6) years of cybersecurity experience with at least three (3) years in a SOC watch floor analyst or IR role.
• Experience leading and mentoring more junior analysts.
• Bachelor’s Degree or higher in Cybersecurity or related is preferred.
• CISSP or CEH certification; additional experience, formal training, certifications, and/or education may be substitutable at the client's discretion.

Responsibilities

• Lead a team of 5-7 analysts utilizing security tools to analyze, investigate, and triage security alerts.
• Monitor customers' environments, including cloud and SaaS solutions for evidence of adversarial activity.
• Perform in-depth analysis and investigation of high-priority cybersecurity incidents.
• Collaborate with cyber threat hunting and cyber threat intelligence teams.
• Participate in development, implementation, and tuning of SOC tools detection content and alerting signatures.
• Document triage findings and intake reports of external cybersecurity events from SOC customers via IMS.

Skills

SOC leadership

Incident response

Mentoring

CISSP/CEH

SIEM tools

Cloud security

Zero trust

Windows/Unix

Education

Bachelor’s Degree in Cybersecurity or related

Tools

Splunk

Sumo Logic

Job description

Quantum Sky is seeking an Incident Response Analyst Shift Lead to support a law enforcement customer in Washington, DC. You will lead a team of IR analysts, triage alerts, and investigate threats, while mentoring Tier 1 and 2 analysts and collaborating with threat intelligence teams.

The role requires strong SOC leadership, experience with SIEM tools (Splunk/Sumo Logic), and cloud security knowledge. This hybrid position involves on-site work two days per week and TS/SCI clearance is expected.