Lead Incident Responder – Tier 2 (24/7 Onsite)

Evans & Chambers; Fort Meade (MD); On-site; USD 130,000 - 158,000; Full time

Job summary

Evans & Chambers seeks a Tier 2 Incident Responder – Team Lead to conduct in-depth investigations, containment, and remediation of security incidents escalated from Tier 1. The role requires TS/SCI with CI Poly clearance and leadership of Tier 1 and Tier 2 responders. The position is onsite at Ft.

Meade, MD with 24/7/365 coverage and on-call rotation for after-hours escalation. Bachelor’s in a related field and DoD 8570/8140 IAT Level III or CSSP Incident Responder certs are required; scripting

Qualifications

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field preferred; 3–5 years of hands-on incident response, digital forensics, or security operations experience.

Responsibilities

• Investigate escalated alerts and incidents through log analysis, malware analysis, and digital forensics to determine scope, root cause, and impact.
• Support containment and eradication actions; assist recovery to a hardened baseline.
• Document incident timelines and findings; track POA&M entries to closure and contribute to after-action reviews.
• Review and remediate findings.
• Provide technical mentorship to Tier 1 Analysts and serve as a secondary escalation point during major incidents.
• Manage personnel workload and daily performance issues.

Skills

Incident response

Digital forensics

Mentorship

Scripting (Python/PowerShell/Bash)

Education

Bachelor's degree in CS/IT/Cybersecurity or related field

Tools

EDR tooling

Packet analysis

Job description

Evans & Chambers seeks a Tier 2 Incident Responder – Team Lead to conduct in-depth investigations, containment, and remediation of security incidents escalated from Tier 1. The role requires TS/SCI with CI Poly clearance and leadership of Tier 1 and Tier 2 responders. The position is onsite at Ft.

Meade, MD with 24/7/365 coverage and on-call rotation for after-hours escalation. Bachelor’s in a related field and DoD 8570/8140 IAT Level III or CSSP Incident Responder certs are required; scripting