Lead Incident Response Analyst — TS/SCI | Onsite/Hybrid

VetJobs; Washington (District of Columbia); Hybrid; USD 135,000 - 145,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

Paid Time Off

STD/LTD/Life Insurance

Parental leave

Job summary

Quantum Sky is seeking an Incident Response Analyst Shift Lead to guide a team of IR analysts in monitoring security tools, triaging alerts, and investigating threats for a law enforcement customer in Washington, DC. The role emphasizes mentorship of Tier 1–2 staff and ongoing training opportunities.

You will lead 5–7 analysts, work in a hybrid client-site environment, and collaborate with threat intelligence teams.

Qualifications

• Minimum of six (6) years of cybersecurity experience with at least three (3) years in a SOC watch floor analyst or IR role.
• Experience leading and mentoring more junior analysts.
• Bachelor's Degree or higher in Cybersecurity or related is preferred.
• CISSP or CEH certification; other experience or training may be substitutable at the client's discretion.
• Experience with cloud service provider offerings.
• Knowledge of malware and zero trust principles.
• Knowledge of Windows and Unix operating systems.
• Proficiency in technical writing and effective communication.
• Comfortable in customer facing environments.

Responsibilities

• Lead a team of 5-7 analysts to analyze, investigate, and triage security alerts.
• Monitor client environments including cloud/SaaS for adversarial activity.
• Perform in-depth analysis of high-priority incidents.
• Use advanced tools to identify root causes, scope and impact of incidents.
• Collaborate with threat hunting and threat intelligence teams.
• Develop, implement, and tune SOC detections and alert signatures.
• Document triage findings and intake reports in the IMS.
• Learn new investigative techniques and emerging threats.
• Contribute to evolving SOC processes and procedures.
• Provide guidance to Tier 1 and 2 analysts.

Skills

Cybersecurity experience

SOC leadership

Regulatory knowledge

Customer facing

Technical writing

Regex & scripting

GiAC/CompTIA certs

Cloud services

Windows/Unix

Education

High School/GED

Bachelor's degree or higher

Tools

SIEM (Splunk)

SIEM (Sumo Logic)

Job description

Quantum Sky is seeking an Incident Response Analyst Shift Lead to guide a team of IR analysts in monitoring security tools, triaging alerts, and investigating threats for a law enforcement customer in Washington, DC. The role emphasizes mentorship of Tier 1–2 staff and ongoing training opportunities.

You will lead 5–7 analysts, work in a hybrid client-site environment, and collaborate with threat intelligence teams.