Junior Cyber Defense Incident Responder — TS/SCI

wwtexternalcareersite; San Antonio (TX); On-site; USD 80,000 - 110,000; Full time

Benefits offered by this job

Health benefits

401k with match

PTO & holidays

Tuition reimbursement

Life and disability insurance

Job summary

World Wide Technology seeks a Jr Cyber Defense Incident Responder in San Antonio, TX to support the 33 COS with incident response for Air Force CSP alerts. You will analyze malicious activity, correlate events across tools, and elevate incidents affecting the environment.

Role requires strong networking knowledge, DPI/traffic analysis, and experience with open-source security tools. On-site work with comprehensive benefits and career growth opportunities.

Qualifications

• 2+ years of incident handling/response experience.

Responsibilities

• Analyze identified malicious activity to determine weaknesses exploited.
• Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.
• Coordinate with enterprise-wide cyber defense staff to validate network alerts.
• Document and elevate incidents that may cause ongoing and immediate impact to the environment.
• Identify and analyze anomalies in network traffic using metadata.
• Perform cyber defense trend analysis and reporting.
• Perform event correlation using information from multiple sources to gain situational awareness.

Skills

Incident handling

Cyber threat hunting

Digital forensics

Cyber Network Defense

Security clearance TS/SCI

GCFA

IAT II 8140

Linux incident response

Networking concepts

Risk management

DPI / traffic analysis

Palo Alto XOAR playbooks

Education

Associate’s Degree or Higher in Cybersecurity, Computer Science or related field

Tools

Zeek

Wireshark

NetFlow

PCAP replay

Open-source IDS tools

Intrusion detection tools

Job description

World Wide Technology seeks a Jr Cyber Defense Incident Responder in San Antonio, TX to support the 33 COS with incident response for Air Force CSP alerts. You will analyze malicious activity, correlate events across tools, and elevate incidents affecting the environment.

Role requires strong networking knowledge, DPI/traffic analysis, and experience with open-source security tools. On-site work with comprehensive benefits and career growth opportunities.