Senior Cyber Defense Incident Responder | TS/SCI Clearance

World Wide Technology; Mountain Home (TX); On-site; USD 140,000 - 160,000; Full time

Benefits offered by this job

Health & wellbeing benefits

401k plan with company matching

Paid time off & holidays

Employee discounts

Job summary

World Wide Technology (WWT) in San Antonio, TX is seeking a Sr Cyber Defense Incident Responder to support the 33 Cyber Operations Squadron and provide incident response on CSSP-aligned alerts.

You will analyze malicious activity, correlate data from multiple tools, and coordinate with enterprise cyber defense teams to protect critical DoD assets. A TS/SCI clearance and GCFA certification are required or highly preferred.

Qualifications

• 6+ years of incident handling/response, cyber threat hunting, computer forensics, and cyber defense experience.
• Bachelor’s Degree or higher in Cybersecurity, CS, or related field.
• IAT III 8140 Certification and GCFA are preferred.
• Top Secret/SCI clearance with ability for higher read-ins.

Responsibilities

• Analyze identified malicious activity to determine weaknesses, exploitation methods and impact.
• Characterize and analyze network traffic to identify anomalies and threats.
• Coordinate with enterprise defense staff to validate alerts and document incidents.
• Perform cyber defense trend analysis and reporting.
• Use multiple tool sources to gain situational awareness and assessment of attacks.

Skills

Incident handling

Cyber threat hunting

GCFA

IAT III 8140

Top Secret/SCI

Linux

Intrusion detection

Education

Bachelor's Degree or Higher in Cybersecurity, Computer Science or related field

Tools

Zeek

Wireshark

NetFlow

PCAP replay

Job description

World Wide Technology (WWT) in San Antonio, TX is seeking a Sr Cyber Defense Incident Responder to support the 33 Cyber Operations Squadron and provide incident response on CSSP-aligned alerts.

You will analyze malicious activity, correlate data from multiple tools, and coordinate with enterprise cyber defense teams to protect critical DoD assets. A TS/SCI clearance and GCFA certification are required or highly preferred.