Senior Cyber Defense Incident Responder (TS/SCI)

S2i2, Inc; Arlington (VA); On-site; USD 165,000 - 180,000; Full time

Benefits offered by this job

Professional certification support

Leadership accessibility

Regular company updates

Team-building activities

Job summary

S2i2, Inc. is seeking a Lead Cyber Defense Incident Responder in Arlington, VA. This highly experienced role combines hands-on technical work with leadership of a security analytics team operating in TS/SCI and SAP environments.

Expect threat hunting, malware research, and development of advanced detection across enclaves. The role requires TS/SCI clearance, DoD 8570/8140 IAT Level II certifications, and a proactive, high-integrity approach to protecting highly secure networks.

Qualifications

• Bachelor's degree in Computer Science, Digital Forensics, or a related major with emphasis on security preferred.
• Six (6+) years of experience in Threat Hunting, Security Research, or Incident Response.
• Demonstrated leadership skills, preferably in a formal leadership role.
• Scripting experience.
• TS/SCI clearance is required.

Responsibilities

• Lead a small team of advanced and mid-level security analysts to provide Incident Defense (ID) services for government clients.
• Serve as the primary technical point of contact for complex threat hunting issues and mentor new team members.
• Engineer advanced detection rules for endpoints, cloud services, network devices, and other sources across classified enclaves.
• Research new malware using hunting capabilities and through partnerships with security researchers, adhering to strict protocols.
• Lead targeted phishing campaigns to educate the workforce on social engineering risks.
• Lead purple and red teaming efforts as directed for highly classified networks.
• Coordinate NOSC schedules to ensure on-call coverage for after-hours, weekends, and holidays.
• Maintain the ID Team toolkit and evaluate new technologies for deployment.
• Conduct investigations and communicate findings effectively to government clients.
• Ensure that written communications are professional, high-quality, and actionable.

Skills

Threat hunting

Security research

Incident response

Leadership

Scripting

Education

Bachelor's degree in Computer Science or related security field

Tools

Splunk SPL

Kusto (KQL)

Elastic Kibana

Carbon Black

Snort

Job description

S2i2, Inc. is seeking a Lead Cyber Defense Incident Responder in Arlington, VA. This highly experienced role combines hands-on technical work with leadership of a security analytics team operating in TS/SCI and SAP environments.

Expect threat hunting, malware research, and development of advanced detection across enclaves. The role requires TS/SCI clearance, DoD 8570/8140 IAT Level II certifications, and a proactive, high-integrity approach to protecting highly secure networks.