Information Security Specialist - Incident Response

Sherpa 6, Inc.; Springfield (VA); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Retirement plan

Generous PTO

Job summary

Sherpa 6 in Springfield, VA is seeking an Information Security Specialist to maintain the security posture of our internal information systems and support vulnerability management, incident response, and audit readiness.

You will work with Security, IT, leadership, and compliance stakeholders to implement secure configurations across Microsoft 365, endpoints, and identity platforms, review audit logs, and help protect data across on-prem and cloud environments.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field.
• 3–5 years of experience in information security or cybersecurity operations.
• Experience with Microsoft security technologies: Defender, Intune, Purview.
• Experience with vulnerability management, log aggregation, SIEM, and incident response.
• Experience securing Windows and Linux in an enterprise environment.

Responsibilities

• Manage system vulnerabilities, including scanning, prioritization, and remediation.
• Support patching and configuration enforcement through endpoint management solutions.
• Provide continuous monitoring of information systems, ensuring audit logs are collected, reviewed, and anomalous activity is identified and mitigated.
• Analyze and correlate logs from endpoints, servers, identity systems, and cloud services.
• Configure and tune alerting and automated response capabilities for security events.
• Perform incident response and reporting for cybersecurity events including malware, phishing, unauthorized access, and data exfiltration.
• Maintain Plans of Action & Milestones (POA&M) and track remediation to closure.
• Ensure all system security documentation (SSPs, baselines, policies, procedures) is current and audit-ready.
• Assist in development and maintenance of security policies, standards, and technical controls.
• Review and assess security impact of system changes as part of change control processes.
• Recommend and implement security configurations across Microsoft 365, endpoint, and identity platforms.
• Conduct user activity monitoring and investigations related to insider threats or policy violations.
• Run security awareness initiatives, including phishing simulations and training activities.
• Prepare reports on vulnerabilities, incidents, and overall security posture.

Skills

Vulnerability management

SIEM

Endpoint security

Audit log review

Microsoft Defender

Microsoft Intune

Microsoft Purview

Change management

Cloud security

Log correlation

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

Microsoft Defender

Microsoft Intune

Microsoft Purview

SIEM tools

Security operation tools

STIGs/CIS Benchmarks

Job description

Sherpa 6 in Springfield, VA is seeking an Information Security Specialist to maintain the security posture of our internal information systems and support vulnerability management, incident response, and audit readiness.

You will work with Security, IT, leadership, and compliance stakeholders to implement secure configurations across Microsoft 365, endpoints, and identity platforms, review audit logs, and help protect data across on-prem and cloud environments.