Senior Cyber Incident Manager (TS/SCI) 24/7 IR Lead

ARGO Cyber Systems, LLC; Arlington (VA); On-site; USD 140,000 - 190,000; Full time

Job summary

Argo Cyber Systems, LLC is seeking a Cyber Incident Manager to lead onsite incident response operations for a U.S. Government customer.

The role coordinates incident handling, forensic triage, and threat mitigation across large-scale events as part of a 24x7 capability supporting federal civilian agencies and critical infrastructure. The candidate will oversee cross-functional teams, apply NIST SP 800-61 and FISMA guidelines, and ensure timely containment, reporting, and recovery with a strong

Qualifications

• Active TS/SCI clearance (must be able to obtain DHS EOD Suitability)
• 5+ years of directly relevant experience in cyber incident management, SOC operations, or DFIR roles
• Strong understanding of incident response methodologies, frameworks, and reporting requirements under NIST SP 800-61 and FISMA
• Demonstrated ability to analyze, prioritize, and document incidents within enterprise or federal environments
• Solid grasp of attack lifecycle stages and common adversary tactics
• Knowledge of system administration, OS hardening, and defensive security controls across Windows, Linux, and hybrid environments
• Familiarity with CND policies, procedures, and regulatory frameworks
• Understanding of threat actor typologies and their operational tradecraft
• Excellent written and verbal communication skills for technical and executive reporting

Responsibilities

• Direct and coordinate incident response activities across diverse environments, ensuring rapid containment and recovery
• Correlate and analyze incident data to identify patterns, trends, and threats
• Perform triage and scoping of cyber incidents to determine severity, urgency, and impact
• Apply Defense-in-Depth principles and best practices to strengthen enterprise resilience
• Investigate indicators of compromise, malware behavior, and intrusion vectors using host and network data
• Research and document resolution steps, mitigations, and workarounds for ongoing or recurring incidents
• Develop and maintain incident response procedures and playbooks aligned with NIST SP 800-61 Rev.2 and FISMA reporting requirements
• Monitor external intelligence sources and threat feeds to maintain situational awareness
• Track, document, and brief incident lifecycle progress from detection through closure, with escalation to senior stakeholders
• Collaborate with threat analysts, forensics personnel, SOC operators, and federal incident coordinators for unified response

Skills

Cyber incident management

SOC operations

DFIR

Incident response frameworks

Communication skills

Education

Bachelor's Degree

High School Diploma with experience

Tools

Splunk

SentinelOne

Elastic

Wireshark

ServiceNow

Jira

Remedy

Job description

Argo Cyber Systems, LLC is seeking a Cyber Incident Manager to lead onsite incident response operations for a U.S. Government customer.

The role coordinates incident handling, forensic triage, and threat mitigation across large-scale events as part of a 24x7 capability supporting federal civilian agencies and critical infrastructure. The candidate will oversee cross-functional teams, apply NIST SP 800-61 and FISMA guidelines, and ensure timely containment, reporting, and recovery with a strong