Lead Cybersecurity Incident Response Analyst (TS/SCI)

Si Tec Consulting; Springfield (VA); On-site; USD 130,000 - 170,000; Full time

Job summary

Si Tec Consulting is seeking a Cybersecurity Operations Analyst Tier 3 in Springfield, VA. This senior role focuses on containment, eradication, and recovery during complex incidents, with forensics, malware analysis, and threat attribution.

You will build incident timelines, reports, and recommendations. Active TS/SCI clearance with polygraph eligibility is required, plus a DoD 8140/8570 IAT II and CSSP Incident Responder certification or ability to obtain it.

Qualifications

• Bachelor's degree or 6+ years cybersecurity experience.
• Active TS/SCI clearance with the ability to obtain a polygraph.
• DoD 8140/8570 IAT II and CSSP Incident Responder compliant certification, or the ability to meet the required certification timeline.
• Experience with incident response, digital forensics, malware analysis, and defensive cyber operations.
• Strong technical writing and communication skills.

Responsibilities

• Lead technical analysis and response actions during cybersecurity incidents.
• Perform host, server, network, memory, and forensic artifact analysis.
• Analyze malware, develop signatures, and identify indicators of compromise.
• Build incident timelines, reports, briefings, and corrective-action recommendations.
• Develop and use approved scripts and tools to collect and analyze data.
• Coordinate with cybersecurity, counterintelligence, and law-enforcement stakeholders as required.
• Review incident tickets for accuracy, documentation, and response quality.
• Participate in exercises and readiness activities when not responding to active incidents.

Skills

Incident response

Digital forensics

Malware analysis

Technical writing

Strong communication

Education

Bachelor's degree or 6+ years cybersecurity experience

Job description

Si Tec Consulting is seeking a Cybersecurity Operations Analyst Tier 3 in Springfield, VA. This senior role focuses on containment, eradication, and recovery during complex incidents, with forensics, malware analysis, and threat attribution.

You will build incident timelines, reports, and recommendations. Active TS/SCI clearance with polygraph eligibility is required, plus a DoD 8140/8570 IAT II and CSSP Incident Responder certification or ability to obtain it.