Senior Onsite Cyber Incident Lead

ARGO Cyber Systems; Fairfax (VA); On-site; USD 120,000 - 180,000; Full time

Job summary

Argo Cyber Systems is seeking a Cyber Incident Manager to lead on-site incident response operations for a U.S. Government customer. You will coordinate forensic triage, threat mitigation, and recovery activities for large-scale cyber events as part of a 24x7 capability.

The role requires active TS/SCI clearance, DHS EOD suitability, and strong experience in DFIR, incident handling, and NIST/FISMA-aligned procedures. This is an on-site position in the Washington DC metro area.

Qualifications

• U.S. Citizenship required.
• Active TS/SCI clearance (DHS EOD Suitability required).
• 5+ years of directly relevant experience in cyber incident management, SOC operations, or DFIR roles.
• Strong understanding of incident response methodologies, frameworks, and reporting requirements under NIST SP 800-61 and FISMA.
• Demonstrated ability to analyze, prioritize, and document incidents within enterprise or federal environments.

Responsibilities

• Direct and coordinate incident response activities across diverse environments—ensuring rapid containment, accurate impact assessment, and effective recovery.
• Correlate and analyze incident data to identify patterns, trends, and emerging threats.
• Perform triage and scoping of cyber incidents to determine severity, urgency, and operational impact.
• Apply Defense-in-Depth principles and best practices to strengthen enterprise resilience.
• Investigate indicators of compromise (IOCs), malware behavior, and intrusion vectors using host and network data.
• Research and document resolution steps, mitigations, and workarounds for ongoing or recurring incidents.
• Develop and maintain incident response procedures and playbooks aligned with NIST SP 800-61 Rev.2 and FISMA reporting requirements.
• Monitor external intelligence sources and threat feeds to maintain situational awareness of current threat conditions.
• Track, document, and brief incident lifecycle progress from detection through closure, ensuring accurate reporting and escalation to senior stakeholders.
• Collaborate with cross-functional teams—including threat analysts, forensics personnel, SOC operators, and federal incident coordinators—to provide unified, mission-focused response.

Job description

Argo Cyber Systems is seeking a Cyber Incident Manager to lead on-site incident response operations for a U.S. Government customer. You will coordinate forensic triage, threat mitigation, and recovery activities for large-scale cyber events as part of a 24x7 capability.

The role requires active TS/SCI clearance, DHS EOD suitability, and strong experience in DFIR, incident handling, and NIST/FISMA-aligned procedures. This is an on-site position in the Washington DC metro area.