Senior Incident Response & Forensics Lead (On-Site TS)

Redport; Gaithersburg (MD); On-site; USD 140,000 - 190,000; Full time

Job summary

Redport IA, LLC is seeking a Senior Incident Response Lead for a hands-on, on-site role requiring an active Top Secret clearance. You will manage a security team while personally leading investigations, analysis, and responses to cyber incidents.

Responsibilities span cloud and endpoint security, access management, and secure networking, with direct customer coordination and briefings to federal leadership.

Qualifications

• Active Top Secret clearance and eligibility to work in the U.S.
• Extensive incident response and forensics experience.
• Experience leading a technical team and coordinating with customers.
• Strong briefing and project management skills.
• Hands-on investigations, analysis, and remediation of cyber incidents.
• Experience across cloud, endpoint security, access management, and secure networking.
• Experience collecting artifacts and supporting defense operations.

Responsibilities

• Manage the day-to-day operations of the incident response team.
• Perform briefings and provide direct coordination with the customer.
• Lead investigations, analysis, and responses to cyber incidents.
• Coordinate and provide expert technical support across cyber defenses.
• Develop incident responses for leadership and enterprise stakeholders.

Skills

Top Secret clearance

Incident response

Forensics

Team leadership

Customer coordination

Briefings

Project management

Cyber investigations

Tools

GCFE – GIAC Certified Forensic Examiner

GCIH – GIAC Certified Incident Handler

CySA+ – CompTIA Cybersecurity Analyst

Job description

Redport IA, LLC is seeking a Senior Incident Response Lead for a hands-on, on-site role requiring an active Top Secret clearance. You will manage a security team while personally leading investigations, analysis, and responses to cyber incidents.

Responsibilities span cloud and endpoint security, access management, and secure networking, with direct customer coordination and briefings to federal leadership.