Tier 2 Cyber Defense Shift Lead (Onsite)

SkyePoint Decisions; Beltsville (MD); On-site; USD 100,000 - 124,000; Full time

Benefits offered by this job

Health insurance

HSA/FSAs

Dental plans

Life insurance

Disability insurance

401k matched

Floating holidays

Job summary

SkyePoint Decisions is seeking a Tier 2 Shift Lead to support the DSCM program, providing leading cyber security expertise to enable secure business processes. This role is onsite in Beltsville, MD, 5 days a week, with no hybrid/telework option.

Responsibilities include detecting and reporting cyber events, analyzing logs from multiple sources, and coordinating remediation with CIRT teams, CISA, and other CIRTs. Requires active Secret clearance and relevant certifications.

Qualifications

• Bachelor’s degree with 9+ years of relevant experience, or Master’s with 7+ years.
• PhD with 4+ years; or 4 additional years of experience in lieu of a degree.
• Active Secret clearance required at start.
• Certifications such as CASP+ CE, CCNA Cyber Ops, CISSP, or CISA preferred.

Responsibilities

• Detect, classify, process, track, and report on cyber security events and incidents.
• Analyze logs from multiple sources to identify, contain, and remediate suspicious activity.
• Collaborate with CISA and other CIRTs; monitor SOAR platforms and tickets.
• Coordinate remediation actions and report incident information to leadership and stakeholders.

Skills

Incident response lifecycle

SOAR platforms

SIEM

EDR

Cloud security monitoring

IOCs integration

MITRE ATT&CK

D3FEND

Active Secret clearance

Tier 2 leadership

Education

Bachelor’s degree

Master’s degree

PhD

Tools

Splunk

Microsoft Sentinel

Elastic

QRadar

Microsoft Defender for Endpoint

Elastic XDR

Carbon Black

CrowdStrike

Job description

SkyePoint Decisions is seeking a Tier 2 Shift Lead to support the DSCM program, providing leading cyber security expertise to enable secure business processes. This role is onsite in Beltsville, MD, 5 days a week, with no hybrid/telework option.

Responsibilities include detecting and reporting cyber events, analyzing logs from multiple sources, and coordinating remediation with CIRT teams, CISA, and other CIRTs. Requires active Secret clearance and relevant certifications.