Senior Cyber Defense Incident Responder — On-Site DoD

wwtexternalcareersite; San Antonio (TX); On-site; USD 140,000 - 160,000; Full time

Benefits offered by this job

Health and Wellbeing benefits

Financial Benefits: 401k + matching

Paid Time Off and Holidays

Additional Perks

Job summary

World Wide Technology seeks a Sr Cyber Defense Incident Responder to support the 33 Cyber Operations Squadron (33 COS) and provide incident response on alerts from systems newly aligned to the Air Force CSSP. Location is San Antonio, TX, fully on-site at Lackland AFB.

Responsibilities include analyzing malicious activity, network traffic, and correlations across data sets, while coordinating with enterprise defense teams to assess risk and respond effectively.

Qualifications

• 6+ years of incident handling/response, cyber threat hunting, forensics, and cyber network defense.
• Bachelor’s degree or higher in cybersecurity, computer science, or related field required.
• IAT III 8140 certification and GCFA certification highly preferred.

Responsibilities

• Analyze identified malicious activity to determine weaknesses exploited, exploitation methods, effects on system and information.
• Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.
• Coordinate with enterprise cyber defense staff to validate network alerts and document incidents with history, status, and impact.

Skills

Incident handling/response

Cyber threat hunting

Computer forensics

Cyber Network Defense

Risk management

Cybersecurity principles

Network security methodologies

Intrusion detection methods

DPI / traffic analysis

Zeek / Wireshark / NetFlow

PCAP replay environments

Linguistic ability to interpret data

Education

Bachelor’s Degree or Higher in Cybersecurity, Computer Science or related field

IAT III 8140 Certification

GIAC Certified Forensic Analyst (GCFA)

Tools

Palo Alto XOAR playbook development

Job description

World Wide Technology seeks a Sr Cyber Defense Incident Responder to support the 33 Cyber Operations Squadron (33 COS) and provide incident response on alerts from systems newly aligned to the Air Force CSSP. Location is San Antonio, TX, fully on-site at Lackland AFB.

Responsibilities include analyzing malicious activity, network traffic, and correlations across data sets, while coordinating with enterprise defense teams to assess risk and respond effectively.