Senior Incident Response & Forensics Lead

ShorePoint; Germantown (MD); On-site; USD 150,000 - 190,000; Full time

Benefits offered by this job

PTO 144 hours

11 holidays

Health insurance coverage 85%

401(k)

Continuing education

Certification maintenance & refund

Job summary

ShorePoint in Germantown, MD is seeking an Incident Response (IR) and Forensics Lead to manage day-to-day operations and perform hands-on investigations across cloud, endpoint, and secure networking domains. The role involves coordinating IR activities, briefing senior federal leadership, and translating complex intrusion artifacts into actionable mitigation plans.

A Bachelor’s or Associate degree plus 7+ years of experience and an active DOE Q or DoD Top Secret clearance are required; onsite

Qualifications

• Bachelor’s degree or Associate degree plus 2+ years of experience.
• 7+ years of relevant experience.
• Applicants must currently hold and maintain an active DOE Q or equivalent DoD Top Secret clearance.
• Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes.

Responsibilities

• Manage day-to-day operations of the IR and forensics team.
• Conduct briefings, coordinate directly with customers and develop IRs for senior federal leadership.
• Collect and analyze intrusion artifacts, including source code, malware and trojans, to support mitigation of potential cyber defense incidents across the enterprise.
• Coordinate and provide expert technical support to enterprise-wide cyber defense technicians to resolve cyber defense incidents.
• Coordinate IR functions.
• Monitor external data sources, including cyber defense vendor sites and Computer Emergency Response resources, to support IR activities.

Skills

IR/Forensics

Cybersecurity operations

Cloud security

Endpoint security

Access management

Secure networking

Security risk assessment

Incident analysis

Education

Bachelor’s degree

Associate degree +2 years

Job description

ShorePoint in Germantown, MD is seeking an Incident Response (IR) and Forensics Lead to manage day-to-day operations and perform hands-on investigations across cloud, endpoint, and secure networking domains. The role involves coordinating IR activities, briefing senior federal leadership, and translating complex intrusion artifacts into actionable mitigation plans.

A Bachelor’s or Associate degree plus 7+ years of experience and an active DOE Q or DoD Top Secret clearance are required; onsite