Senior Cyber Defense Incident Responder | TS/SCI

World Wide Technology, Inc.; San Antonio (TX); On-site; USD 140,000 - 160,000; Full time

Benefits offered by this job

Health and Wellbeing

Financial Benefits

Paid Time Off

Additional Perks

Job summary

World Wide Technology, Inc. is seeking a Sr Cyber Defense Incident Responder to support the 33 Cyber Operations Squadron in on-site duties at Lackland AFB, San Antonio, TX.

You will analyze incidents, map exploitation methods, and coordinate with enterprise cyber defense teams. This role requires 6+ years in incident handling/response, GCFA, IAT III 8140, TS/SCI clearance, and deep knowledge of networking, risk management, and intrusion detection.

Qualifications

• 6+ years of experience in incident handling/response, cyber threat hunting, forensics and cyber defense.
• Bachelor’s Degree or Higher in Cybersecurity, Computer Science or related field.
• IAT III 8140 Certification and GCFA certification are required.
• Security Clearance: Top Secret/SCI with potential for higher read-ins.
• Strong knowledge of networking concepts, protocols, and network security methodologies.
• Experience with risk management and regulatory considerations in cybersecurity.
• Familiarity with intrusion detection techniques and defender tools.
• Ability to interpret data from multiple security tools.

Responsibilities

• Analyze identified malicious activity to determine weaknesses exploited and effects on systems.
• Characterize and analyze network traffic to identify anomalies and threats.
• Conduct research and correlation across diverse data sources.
• Coordinate with enterprise cyber defense staff to validate alerts.
• Document incidents with history, status, and potential impact.
• Identify anomalies in network traffic using metadata.
• Determine applications and OS types of devices from traffic data.
• Perform cyber defense trend analysis and reporting.
• Perform event correlation to gain situational awareness and attack effectiveness.
• Interpret and incorporate data from multiple security tools.
• All other duties as defined by CSSP.

Skills

Incident handling

Cyber threat hunting

Forensics

Cyber Defense

Network security

Risk management

Intrusion detection

Palo Alto XOAR playbook

Linux incident response

Traffic analysis

Education

Bachelor’s degree or higher

Tools

Zeek

Wireshark

NetFlow

PCAP replay environments

Job description

World Wide Technology, Inc. is seeking a Sr Cyber Defense Incident Responder to support the 33 Cyber Operations Squadron in on-site duties at Lackland AFB, San Antonio, TX.

You will analyze incidents, map exploitation methods, and coordinate with enterprise cyber defense teams. This role requires 6+ years in incident handling/response, GCFA, IAT III 8140, TS/SCI clearance, and deep knowledge of networking, risk management, and intrusion detection.