Senior Incident Response Lead — On-Call Threat Hunter

Peraton; Herndon (VA); On-site; USD 104,000 - 166,000; Full time

Job summary

Peraton is seeking a Senior Incident Response Analyst to lead hands-on incident response for critical Califonia health systems. You will own detection engineering, threat hunting, and serve as backup incident manager, coordinating with the client and our Security Services team.

You will guide playbooks, lead on-call rotation, and drive SIEM/SOAR work across cloud and on-prem environments. The role emphasizes protecting PII/PHI and complying with regulatory timelines.

Qualifications

• Bachelor's degree in cybersecurity or computer science; 4 years additional experience optional.
• 8+ years of cybersecurity experience with hands-on incident response leadership.
• Active GCIH or GCIA certification.
• Hands-on with enterprise SIEM and SOAR platforms (Splunk, MS Sentinel) including detection engineering.
• Threat hunting experience using MITRE ATT&CK; malware triage and forensics basics.
• Experience leading incidents as the incident lead, with evidence handling and post-incident reporting.
• Knowledge of NIST SP 800-61 and scripting for response automation.

Responsibilities

• Lead end-to-end incident response including triage, containment, eradication, and recovery.
• Develop and exercise incident response playbooks and runbooks.
• Drive SIEM/SOAR content development, log onboarding, alert tuning, and detection engineering.
• Conduct threat hunting mapped to MITRE ATT&CK and turn findings into detections.
• Coordinate evidence handling, chain of custody, reporting, and post-incident reviews.
• Meet contract clock with timely notifications and breach reporting timelines.
• Provide status reports to security leadership and support vulnerability management.

Skills

Incident response leadership

Threat hunting MITRE ATT&CK

Scripting for response automation

GCIH/GCIA certification

Incident lead/commander experience

Detection engineering experience

PII/PHI handling knowledge

Education

Bachelor's degree in cybersecurity or computer science

Tools

Splunk

Microsoft Sentinel

Job description

Peraton is seeking a Senior Incident Response Analyst to lead hands-on incident response for critical Califonia health systems. You will own detection engineering, threat hunting, and serve as backup incident manager, coordinating with the client and our Security Services team.

You will guide playbooks, lead on-call rotation, and drive SIEM/SOAR work across cloud and on-prem environments. The role emphasizes protecting PII/PHI and complying with regulatory timelines.