Senior Cyber Defense Incident Responder – On-Site

World-Wide-Technology; San Antonio (TX); On-site; USD 140,000 - 160,000; Full time

Benefits offered by this job

Health and Wellbeing benefits

Profit Sharing

401k with company matching

PTO and Holidays

Job summary

World Wide Technology seeks a Sr Cyber Defense Incident Responder to support the 33 Cyber Operations Squadron, focusing on incident response for Air Force CSSP-aligned systems. You will analyze alerts, perform network traffic analysis, and coordinate with enterprise cyber defense teams.

The role requires a TS/SCI clearance, GCFA and IAT III 8140 certifications, and a strong background in Linux incident response and forensics. On-site in San Antonio, TX, with competitive benefits.

Qualifications

• 6+ years of incident handling/response, cyber threat hunting, forensics and cyber defense.
• Bachelor’s Degree or higher in Cybersecurity, CS or related field.
• IAT III 8140 Certification is required.
• GCFA certification is required.
• Top Secret/SCI clearance with potential for higher read-ins.
• Knowledge of networking, risk management, and cyber defense tools.

Responsibilities

• Analyze identified malicious activity to determine weaknesses, exploitation methods and effects.
• Characterize and analyze network traffic to identify anomalies and threats.
• Coordinate with cyber defense staff to validate alerts.
• Document and elevate incidents with history, status and impact.
• Perform cyber defense trend analysis and reporting.
• Conduct event correlation to gain situational awareness.

Skills

Incident handling

Cyber threat hunting

Computer forensics

Cyber Network Defense

Network security concepts

Risk management

IT security principles

Intrusion detection

Palo Alto XOAR playbook development

Linux incident response

Education

Bachelor’s degree or higher in Cybersecurity/CS

Tools

Zeek

Wireshark

NetFlow

PCAP replay

Job description

World Wide Technology seeks a Sr Cyber Defense Incident Responder to support the 33 Cyber Operations Squadron, focusing on incident response for Air Force CSSP-aligned systems. You will analyze alerts, perform network traffic analysis, and coordinate with enterprise cyber defense teams.

The role requires a TS/SCI clearance, GCFA and IAT III 8140 certifications, and a strong background in Linux incident response and forensics. On-site in San Antonio, TX, with competitive benefits.