Senior Cyber Incident Response Lead (TS/SCI)

ARSIEM Corporation; Virginia (MN); On-site; USD 140,000 - 190,000; Full time

Job summary

ARSIEM Corporation seeks a Cyber Action Officer to support one of our Government clients in Arlington, VA. You will manage cyber incidents through the response lifecycle, create routine incident reports, and coordinate with internal and external stakeholders to determine optimal courses of action.

You will track cases, draft leadership briefings, and maintain system records while applying threat and vulnerability management and MITRE ATT&CK-informed techniques.

Qualifications

• 5+ years of direct incident management or cybersecurity operations experience
• Experience with incident response lifecycle and threat hunting
• Ability to track multiple engagements and coordinate with stakeholders

Responsibilities

• Support the management of cyber incidents through the incident response lifecycle
• Create and maintain routine reporting of cyber incidents in official systems of record
• Coordinate with internal and external customers, partners, and stakeholders
• Ingest, validate, and evaluate information to determine actions
• Update and track cases and tickets with accuracy and timeliness
• Draft summaries of ongoing operations and present to leadership
• Maintain knowledge objects in the system of record consistently
• Conduct threat and vulnerability management and categorize threats

Skills

Incident response

Threat hunting

Cybersecurity operations

Stakeholder coordination

Case management

Education

BS in Incident Management / Cybersecurity

HS Diploma with 7-9 years in incident management or cybersecurity

Tools

NCCIC National Cyber Incident Scoring System

Job description

ARSIEM Corporation seeks a Cyber Action Officer to support one of our Government clients in Arlington, VA. You will manage cyber incidents through the response lifecycle, create routine incident reports, and coordinate with internal and external stakeholders to determine optimal courses of action.

You will track cases, draft leadership briefings, and maintain system records while applying threat and vulnerability management and MITRE ATT&CK-informed techniques.