Senior Incident Responder

Revolutional, LLC; New Carrollton (MD); Vor Ort; USD 130.000 - 170.000; Vollzeit

Benefits dieser Stelle

Medical insurance

Dental & vision insurance

STD/LTD/Life insurance

401(k) matching

Flexible schedules

Paid holidays

Parental leave

Professional development

Team events

Zusammenfassung

Revolutional seeks a Sr. Incident Responder to lead incident analysis in a 24x7 SOC supporting a large federal agency. You will oversee investigations from evidence through response, coordinating with client IT, contractors, and internal experts.

The successful candidate will mentor responders, develop monitoring improvements, and ensure timely, well-supported incident findings and timelines. Onsite in New Carrollton, MD or Memphis, TN; US citizenship and Public Trust clearance required.

Qualifikationen

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or related field; 7+ years experience; substitution allowed.
• Seasoned technical individual contributor with deep technical knowledge.
• Experience with incident analysis in large enterprises, log analysis, and IOC correlation.
• Expertise with SIEM, EDR, and network security monitoring tools.
• Familiarity with NIST SP 800-61 and MITRE ATT&CK framework.

Aufgaben

• Lead incident analysis from initial evidence to recommended response.
• Deliver clear incident findings and timelines.
• Improve monitoring, triage, escalation, and analysis procedures using lessons learned.
• Guide and develop incident responders.

Kenntnisse

SIEM

EDR

Log analysis

Incident response

Threat intel

NIST SP 800-61 knowledge

MITRE ATT&CK knowledge

Ausbildung

Bachelor's degree

Tools

SIEM platforms

EDR platforms

Azure

AWS

Jobbeschreibung

Title:

Sr. Incident Responder

Location:

Onsite – New Carrollton, MD or Memphis, TN

Terms:

Full-time

Salary:

$130K - $170K DOE

Clearance:

Public Trust

Travel:

0% (onsite presence at client facilities as directed)

Position Description

We are seeking a Sr. Incident Responder to serve as task lead for incident analysis in a 24x7x365 Security Operations Center (SOC) supporting a large federal agency. This seasoned technical contributor analyzes suspected cybersecurity incidents to determine their nature, scope, severity, likely cause, affected assets, operational impact, and recommended response actions, leads the incident responders performing this work, and collaborates with internal experts on deep analyses.

The successful candidate will:

• Lead incident analysis from initial evidence through recommended response.
• Deliver clear, well-supported incident findings and timelines.
• Turn lessons learned into better monitoring, triage, and escalation.
• Guide and develop incident responders.

Responsibilities:

• Serve as task lead for incident analysis, assigning and reviewing the work of incident responders.
• Analyze suspected incidents to identify relevant activity, affected systems, indicators of compromise, timeline of events, and potential impact.
• Correlate data from logs, alerts, artifacts, reports, threat intelligence, and other approved sources.
• Document analytical findings, confidence levels, supporting evidence, and recommended response or remediation actions in Incident Analysis Reports.
• Coordinate analysis with client IT organizations, other contractors, vendors, and authorized stakeholders as directed.
• Support federal and organizational incident reporting requirements as directed.
• Use incident findings and lessons learned to improve monitoring, triage, escalation, and analysis procedures.

Required Skills and Experience

• Bachelor’s degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field and 7+ years of relevant professional experience; three (3) years of additional relevant experience may be substituted in lieu of a degree.
• Seasoned technical individual contributor, fully proficient in applying technical principles, theories, and concepts in the field.
• Ability to develop solutions to technical problems and issues that are difficult, unclear, and require deep technical knowledge.
• Deep understanding of the principles, theories, and concepts of the technical domain, with broad understanding of related specialty areas.
• Experience performing in-depth incident analysis in large enterprise environments, including log analysis and IOC correlation.
• Expertise with SIEM, EDR, and network security monitoring tools.
• Working knowledge of NIST SP 800-61 and the MITRE ATT&CK framework.

Desired

• Experience supporting federal government contracts as a contractor, including working to contract performance standards, deliverable schedules, and government review and approval processes.
• Certifications such as GCIH, GCIA, GCFA, or CISSP.
• Experience analyzing incidents in AWS and Microsoft Azure/M365 environments.
• Experience with SOAR playbooks and automation.

Work Authorization/Clearance:

Must be a U.S. Citizen and able to obtain a Public Trust clearance.

#Dice #LinkedIn

Here at Revolutional we are pleased to have been repeatedly recognized for our outstanding work culture, the innovative work we do, and the employees on our team who make a difference each day. Some of these recognitions include:

• Recognized as a Top 20 “Best Place to Work in Virginia”
• Recipient of Department of Labor’s HireVets Gold Medallion
• Great Place to Work Certification for five years running
• A Virginia Chamber of Commerce Fantastic 50 company
• A Northern Virginia Technology Council Tech 100 company
• Inc. 5000 list of fastest growing companies for eleven years
• Two-time SBA SBIR Tibbett’s Award winner
• Virginia Values Veterans (V3) Certification

We recognize that every bit of our success is the result of our teams of hard-working, motivated, and innovative professionals who are proud to call themselves part of the Revolutional family! In addition to competitive compensation, a family-focused culture, and a dynamic, productive work environment, we offer all full‑time employees a variety of benefits including, but not limited to

• Traditional and HSA‑ eligible medical insurance plans
• 100% employer-paid dental and vision insurance options
• 100% employer-sponsored STD, LTD, and life insurance
• 5% 401(k) company matching
• Flexible‑schedules and teleworking options
• Paid holidays and PTO Accrual Plans
• Paid Parental Leave
• Professional development and career growth opportunities
• Team and company‑wide events, recognition, and appreciation– and so much more!

Revolutional is an Equal Opportunity Employer providing equal employment opportunity to all employees and applicants for employment without regard to race, color, religion, national origin, age, gender, gender identity, sexual orientation, disability, or genetics. Revolutional_does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans.To perform the above job successfully, an individual must possess the knowledge, skills, and abilities listed; meet the education and work experience required; and must be able to perform each essential duty and responsibility satisfactorily. Other duties in addition to those listed may be assigned as necessary to meet business needs. Reasonable accommodation will be made to enable an applicant with a disability to successfully apply for and/or perform the essential duties of the job. If you are in need of an accommodation, please contact [e-mail]_.

Know Your Rights: Workplace Discrimination is Illegal Poster | U.S. Equal Employment Opportunity Commission