Mid Cyber Defense Incident Responder

GZO; San Antonio (TX); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Health insurance

Dental insurance

Vision insurance

Wellness resources

401(k)

Employee discounts

Paid time off

Job summary

GZO INC is seeking a Mid Cyber Defense Incident Responder to join our San Antonio team. You will defend critical systems, analyze threats, and coordinate responses to incidents in a fast-paced cybersecurity environment.

You will work with cross-functional teams on network traffic analysis, trend reporting, and incident documentation to minimize risk and protect information assets. A strong background in forensics, network security, and threat intelligence is essential.

Qualifications

• 4+ years in incident handling/response, cyber threat hunting, or cyber defense.
• Bachelor’s degree or higher in cybersecurity, CS or related field.
• IAT II 8140 and GCFA certifications are preferred.
• Top Secret/SCI clearance or potential for higher read-ins.
• Strong knowledge of networking concepts, protocols, and security methodologies.

Responsibilities

• Analyze malicious activity to determine exploit methods and impact.
• Characterize network traffic and identify anomalous activity.
• Correlate data from diverse sources to assess threats.
• Coordinate with enterprise cyber defense teams to validate alerts.
• Document incidents, history, status, and potential impacts.
• Perform trend analysis and reporting on cyber defense activities.
• Interpret data from multiple tools to gain situational awareness.
• Handle all duties as defined by CSSP.

Skills

Incident handling

Threat hunting

Computer forensics

Cyber Network Defense

Analysis

Risk management

Cybersecurity principles

Education

Bachelor’s Degree in Cybersecurity or related field

Tools

Open-source cybersecurity tools

SIEM concepts

Job description

Benefits:

• 401(k) matching


• Dental insurance


• Vision insurance


• Wellness resources


• 401(k)


• Employee discounts


• Health insurance


• Paid time off

About the Role:

GZO INC is looking for a talented Mid Cyber Defense Incident Responder to join our team in San Antonio, TX. This is an exciting opportunity to be on the front lines of cybersecurity, protecting critical systems and responding to emerging threats. If you thrive in fast-paced environments and are passionate about defending against cyber adversaries, we want to hear from you.

RESPONSIBILITIES:

• Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information.


• Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.


• Conduct research, analysis, and correlation across a wide variety of all source data sets (indications and warnings).


• Coordinate with enterprise-wide cyber defense staff to validate network alerts.


• Document and escalation incidents (including event’s history, status, and potential impact for further action) that may cause ongoing and immediate impact to the environment.


• Identify and analyze anomalies in network traffic using metadata.


• Identify applications and operating systems of a network device based on network traffic.


• Perform cyber defense trend analysis and reporting.


• Perform event correlation using information gathered from a variety of sources within the enterprise to gain situational awareness and determine the effectiveness of an observed attack.


• Ability to interpret and incorporate data from multiple tool sources.


• All other duties as defined by CSSP.

QUALIFICATIONS:

• 4+ years of experience in conducting incident handling/response, cyber threat hunting, Computer forensics, Cyber Network Defense and Analysis


• Bachelor’s Degree or Higher in Cybersecurity, Computer Science or related field


• IAT II 8140 Certification


• GIAC Certified Forensic Analyst (GCFA)


• Security Clearance: Top Secret/SCI with potential for higher read-ins


• Knowledge of computer networking concepts and protocols, and network security methodologies.


• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).


• Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.


• Knowledge of cybersecurity principles.


• Knowledge of cyber threats and vulnerabilities.


• Knowledge of specific operational impacts of cybersecurity lapses.


• Knowledge of authentication, authorization, and access control methods.


• Knowledge of cyber defense and vulnerability assessment tools, including open-source tools, and their capabilities.

About Us:

GZO INC is a trusted cybersecurity and technology solutions provider based in San Antonio, TX, dedicated to delivering mission-critical defense and IT services. Our team is built on a culture of excellence, innovation, and integrity — qualities our clients rely on every day. At GZO INC, employees enjoy meaningful work, professional growth opportunities, and the chance to make a real impact in national security and cyber defense.