Senior CSOC Cyber Incident Responder – TS/SCI

D2Consulting; Springfield (VA); On-site; USD 110,000 - 115,000; Full time

Benefits offered by this job

Health/Dental/Vision

401(k) match

PTO

STD/LTD/Life Insurance

Referral Bonuses

Professional development reimbursement

Job summary

D2Consulting in Springfield, VA seeks a CSOC Tier 3 Cybersecurity Incident Responder to lead containment, eradication, and recovery during incidents, applying malware analysis, forensics, and incident response expertise. Active TS/SCI clearance with polygraph ability is required; candidates should have a Bachelor's degree or 8+ years in cyber, and IAT II/CSSP qualifications.

You will collaborate with government and contractor teams, develop scripts, and produce detailed incident reports to drive

Qualifications

• Bachelor's Degree or 8+ years of relevant cybersecurity experience.
• Active TS/SCI clearance with the ability to obtain a polygraph.
• Must have or be able to obtain DoDD 8140.01 and DoD 8570.01-M IAT Level II and CSSP Incident Responder certifications within six months.
• Expertise in malware analysis, digital forensics, and incident response across host/server/network data.
• Proficiency in scripting/automation and developing custom tools for incident response.
• Strong communication and coordination skills across teams and government agencies.

Responsibilities

• Coordinate and execute tasks during cyber incidents, including containment and disabling user accounts as directed.
• Collaborate with Security/Installations Directorate, Insider Threat Office, law enforcement, and counterintelligence to triage incidents.
• Produce detailed incident reports, categorize events, and ensure containment and eradication.
• Ensure cross‑team coordination to de‑conflict blue/red team activities and recovery.
• Develop timelines, briefings, and documentation to inform stakeholders of incident impacts.
• Develop and run custom scripts/tools to analyze data and respond to incidents when authorized.
• Perform in-depth analysis of host, server, and network data, including malware reverse engineering.

Skills

Incident response

Digital forensics

Malware analysis

Scripting & automation

Communication

Collaboration

Documentation

Education

Bachelor's degree or 8+ years experience

Job description

D2Consulting in Springfield, VA seeks a CSOC Tier 3 Cybersecurity Incident Responder to lead containment, eradication, and recovery during incidents, applying malware analysis, forensics, and incident response expertise. Active TS/SCI clearance with polygraph ability is required; candidates should have a Bachelor's degree or 8+ years in cyber, and IAT II/CSSP qualifications.

You will collaborate with government and contractor teams, develop scripts, and produce detailed incident reports to drive