Incident Response Officer - Intermediate (TS/SCI, GCFA)

Ssd Anc; San Antonio (TX); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Health insurance

Paid time off

401(k) with company match

Tuition reimbursement

Job summary

STS Systems Defense, LLC (SSD) seeks an Incident Response Officer (Intermediate) to support Lackland AFB in San Antonio, TX. The role requires handling cyber incidents, conducting investigations, and coordinating with AF OSI and other agencies.

Responsibilities include IRP execution, MISREPS, and knowledge transfer to duty crews. Candidates need TS/SCI and GCFA certification, with a strong background in forensics and DoD networks.

Qualifications

• Active TS/SCI security clearance required.
• GCFA certification required (GIAC Certified Forensic Analyst).
• Experience with DoD network topology and DMZ protection.
• Proficient in incident response, analysis, and reporting.
• Experience with packet capture and tools like WireShark and Snort.
• Knowledge of MITRE ATT&CK framework.
• BA/BS or MA/MS degree.

Responsibilities

• Open intrusion investigations upon suspicious activity on DoD networks.
• Lead incident response processes and remediation actions.
• Generate end-of-mission reports (MISREPS) with high accuracy.
• Provide DCO technical support to law enforcement and CI agencies as needed.
• Coordinate with crews and plan incident response deployments.

Skills

Incident response

Network forensics

Log analysis

MITRE ATT&CK

WireShark/Snort

DoD network knowledge

EnCase/FTK

Education

BA/BS or MA/MS

Tools

WireShark

Snort

EnCase

EnCase Enterprise

FTK

Job description

STS Systems Defense, LLC (SSD) seeks an Incident Response Officer (Intermediate) to support Lackland AFB in San Antonio, TX. The role requires handling cyber incidents, conducting investigations, and coordinating with AF OSI and other agencies.

Responsibilities include IRP execution, MISREPS, and knowledge transfer to duty crews. Candidates need TS/SCI and GCFA certification, with a strong background in forensics and DoD networks.