Senior Federal Incident Response Lead

evolverinc; Washington (District of Columbia); On-site; USD 180,000 - 240,000; Full time

Job summary

Evolver Federal is seeking a Lead Incident Responder to centralize day-to-day incident response for a potential government contract. You will lead end-to-end IR activities, coordinate with SOC teams and federal stakeholders, and drive forensic investigations and reporting to ensure rapid containment and recovery.

The role emphasizes MTTR reduction, compliance with NIST RMF/FISMA, and Zero Trust alignment, requiring deep technical expertise and strong leadership.

Qualifications

• Bachelor's Degree in Computer Science/Information Management/Information Technology/Engineering or equivalent with 6 years technical experience and 4 years' experience in IT Solutions at senior management.
• CISSP certification.
• Certified Incident Handler, Certified Intrusion Analyst, Certified Ethical Hacker, or similar certifications.
• PMI Project Management Professional (PMP) highly recommended.
• ITIL 4 Foundation certification.
• 10 years of enterprise IT/tech experience, last 5 on large government BPAs/contracts.
• U.S. citizenship with the ability to pass a comprehensive government background check.

Responsibilities

• Lead end-to-end incident response activities, including detection, triage, containment, eradication, and recovery.
• Direct investigations of advanced threats, including APTs, ransomware, and insider threats.
• Lead tabletop exercises and incident simulations for federal agencies.
• Coordinate with SOC analysts, engineering teams, and federal stakeholders during major incidents.
• Develop and maintain incident response playbooks, escalation procedures, and forensic methodologies.
• Ensure alignment with Zero Trust Architecture principles.
• Perform root cause analysis and recommend corrective actions to prevent recurrence.
• Integrate threat intelligence into incident response workflows to enhance detection and mitigation.
• Oversee digital forensics and evidence handling for legal and compliance requirements.
• Prepare and deliver executive-level incident reports and post-incident reviews.
• Support continuous improvement initiatives, including automation of incident response processes.
• Ensure compliance with federal cybersecurity frameworks (NIST 800-series, RMF, FISMA) and organizational policies.

Skills

Leadership

Incident response

Threat intelligence

Communication

Mentoring

Federal compliance

Education

Bachelor's degree in Computer Science/IM/IT/Engineering

CISSP

CISM or GIAC certifications

PMI PMP (Highly Recommended)

ITIL 4 Foundation

10 years enterprise IT/tech experience, last 5 on government BPAs/contracts

US Citizen with ability to pass background check

Tools

Splunk

Elastic

Cortex XSOAR

CrowdStrike

Microsoft Defender

AWS

Azure

Job description

Evolver Federal is seeking a Lead Incident Responder to centralize day-to-day incident response for a potential government contract. You will lead end-to-end IR activities, coordinate with SOC teams and federal stakeholders, and drive forensic investigations and reporting to ensure rapid containment and recovery.

The role emphasizes MTTR reduction, compliance with NIST RMF/FISMA, and Zero Trust alignment, requiring deep technical expertise and strong leadership.