Top Secret Incident Response Specialist Onsite Boston

Cypress Consulting; Boston (MA); On-site; USD 159,000 - 227,000; Full time

Job summary

Cypress Consulting in Boston, MA is seeking a Cyber Incident Response Specialist for a hands-on, 6-month onsite contract. You will investigate security alerts, contain threats, support recovery, and improve incident readiness.

You will collaborate with security and IT teams, analyze logs and network data, preserve evidence, document timelines and remediation actions, and communicate findings to technical stakeholders.

Qualifications

• Active Top Secret clearance required.
• Hands-on incident response or security operations experience.
• Experience with SIEM, EDR and network analysis tools.
• Working knowledge of Windows and Linux, networking, and attacker techniques.
• Strong troubleshooting, documentation and communication skills.
• Ability to work onsite in the Boston, MA area for the 6-month engagement.

Responsibilities

• Investigate security alerts and suspected compromises across networks, endpoints, and systems.
• Analyze logs, network traffic, and endpoint evidence to determine incident scope and impact.
• Coordinate containment, eradication, and recovery activities.
• Preserve evidence and document investigation findings, timelines, and remediation actions.
• Communicate incident status and recommendations to technical teams and stakeholders.
• Help maintain response playbooks and conduct post-incident reviews.

Skills

Top Secret clearance

Incident response / security ops

SIEM

EDR tools

Network analysis

Windows

Linux

Documentation

Communication

Onsite work

Tools

SIEM tools

EDR tools

Network analysis tools

Job description

Cypress Consulting in Boston, MA is seeking a Cyber Incident Response Specialist for a hands-on, 6-month onsite contract. You will investigate security alerts, contain threats, support recovery, and improve incident readiness.

You will collaborate with security and IT teams, analyze logs and network data, preserve evidence, document timelines and remediation actions, and communicate findings to technical stakeholders.