Mission-Critical Cyber Incident Response Lead

Peraton; Fort Huachuca (AZ); On-site; USD 150,000 - 190,000; Full time

Job summary

Peraton seeks an experienced Cyber Incident Response Team Lead to guide a skilled team of senior analysts. You will provide operational leadership, technical direction, and oversight for cyber incident handling across GCC CSSP missions, interfacing with unit commanders and senior leaders during high-priority events.

You will drive playbook modernization, detection-to-response workflows, and performance metrics, ensuring adherence to DoD/CSSP standards and timely incident reporting across

Qualifications

• Active Top Secret clearance with SCI eligibility.
• Must possess DoW 8140 DCWF 531 Advanced Certification.
• Deep technical expertise in network/host-based incident triage, digital forensics integration, log correlation (SIEM/EDR), and attack path reconstruction aligned to the MITRE ATT&CK framework.
• Experience coordinating incident response within DoD/Army enterprise architectures (NETCOM, ARCYBER, GCC).
• Understanding of NIST SP 800-61 Rev. 3 and 8140 requirements and CSSP timelines.

Responsibilities

• Escalation management as incident commander for high-severity events.
• Coordinate cross-command incident response with GCC leadership, NETCOM, and ARCYBER.
• Provide technical quality control for incident reports and closure documentation.

Skills

Incident response leadership

DoD/CSSP coordination

NIST SP 800-61 Rev. 3

ATT&CK framework knowledge

Threat hunting & forensics

Education

BS/BA

MS/MA

Associates

No degree required

Tools

SIEM/EDR tooling

Job description

Peraton seeks an experienced Cyber Incident Response Team Lead to guide a skilled team of senior analysts. You will provide operational leadership, technical direction, and oversight for cyber incident handling across GCC CSSP missions, interfacing with unit commanders and senior leaders during high-priority events.

You will drive playbook modernization, detection-to-response workflows, and performance metrics, ensuring adherence to DoD/CSSP standards and timely incident reporting across