Senior Incident Responder Minerva Cyber Technologies SMARTER CYBER

Minerva Cyber Tech; Columbia (MD); On-site; USD 120,000 - 160,000; Full time

Job summary

Minerva Cyber Technologies is seeking a Senior Incident Responder to lead the technical response to cybersecurity incidents and help teams make sound decisions under pressure. You will coordinate rapid evidence collection and prioritize actions during high‑stakes investigations.

You will connect incident investigation findings to containment, recovery, stakeholder communication, and improvements in incident response readiness across client environments.

Qualifications

• Senior-level incident response experience coordinating complex investigations.
• Hands-on ability to interpret security telemetry and distinguish evidence from hypotheses.
• Knowledge of evidence handling, incident documentation, containment and recovery validation.
• Ability to explain uncertainty and response options to technical and nontechnical stakeholders.
• Willingness to travel to client sites as needed.

Responsibilities

• Scope security incidents, establish investigation priorities, and coordinate evidence collection.
• Analyze endpoint, identity, network, and cloud telemetry to identify attacker activity and impact.
• Recommend containment and recovery actions with system owners and decision makers.
• Maintain incident timelines, escalation updates, and clear handoffs.
• Develop incident response playbooks, support tabletop exercises, and verify lessons learned.

Skills

Senior incident response

Telemetry analysis

Stakeholder communication

Evidence handling

Incident timelines & documentation

Travel to client sites

Job description

Senior Incident Responder

Minerva Cyber Technologies is seeking a Senior Incident Responder to lead the technical response to cybersecurity incidents and help teams make sound decisions under pressure. You will connect incident investigation findings to containment, recovery, stakeholder communication, and improvements in incident response readiness.

What You Will Do

• Scope security incidents, establish investigation priorities, and coordinate evidence collection and preservation.
• Analyze endpoint, identity, network, and cloud telemetry to establish attacker activity and impact.
• Recommend containment and recovery actions with system owners and authorized decision makers.
• Maintain incident timelines, decision records, escalation updates, and clear handoffs.
• Develop incident response playbooks, support tabletop exercises, and verify completion of lessons‑learned actions.

Required Qualifications

• Senior-level incident response experience, including coordination of complex investigations.
• Hands‑on ability to interpret security telemetry and distinguish supported conclusions from hypotheses.
• Knowledge of evidence handling, incident documentation, containment, and recovery validation.
• Ability to explain uncertainty and response options to technical and nontechnical stakeholders.
• Ability to travel to client sites as needed.

Preferred Qualifications

• Experience with digital forensics, detection engineering, ransomware response, or regulated operations.
• GCIH, GCFA, GCFE, CISSP, or comparable incident response expertise.

Why Join Minerva

• Work on meaningful missions tied to critical infrastructure resilience and cybersecurity.
• Join a team with deep hands‑on cyber and national security experience.
• Help build and shape Minerva’s growing OT and critical infrastructure practice.
• Contribute to practical, outcomes‑driven work rather than checkbox consulting.