Senior Cyber Incident Response Lead

Booz Allen Hamilton; Bethesda (MD); On-site; USD 99,000 - 225,000; Full time

Job summary

Booz Allen Hamilton is seeking an experienced information security risk specialist to join a 24x7 SOC and Incident Response team. You will monitor, detect, investigate, and respond to cybersecurity threats across enterprise networks, endpoints, and applications, leveraging SIEM, EDR, IDS/IPS, and forensic tools.

The role requires strong incident response skills, hands-on activities, and collaboration with federal stakeholders.

Qualifications

• 5+ years of experience in a Security Operations Center (SOC) performing incident response activities.
• Experience analyzing and responding to security events across enterprise networks, endpoints, and security platforms.
• Experience developing or contributing to incident response playbooks, workflows, or SOPs.
• Experience with continuous monitoring and security assessment practices.
• Experience with security tools and investigative techniques used by SOC teams.

Responsibilities

• Perform hands-on incident response activities including triage, analysis, containment, and documentation.
• Leverage SIEM/EDR/IDS-IPS/SOAR and forensic tools to validate and escalate security events.
• Develop and improve incident response playbooks and procedures.
• Collaborate with federal stakeholders and communicate findings to technical and non-technical audiences.
• Support threat hunting and continuous monitoring to strengthen detection capabilities.

Skills

Incident response

SOC operations

Threat hunting

Log analysis

Communication

Forensic imaging

Team collaboration

Education

Bachelor's degree

Tools

SIEM

EDR

IDS/IPS

SOAR

Forensic tools

Job description

Booz Allen Hamilton is seeking an experienced information security risk specialist to join a 24x7 SOC and Incident Response team. You will monitor, detect, investigate, and respond to cybersecurity threats across enterprise networks, endpoints, and applications, leveraging SIEM, EDR, IDS/IPS, and forensic tools.

The role requires strong incident response skills, hands-on activities, and collaboration with federal stakeholders.