TS/SCI Cyber Defender — Incident Response Lead

IBM; Boston (MA); On-site; USD 153,000 - 230,000; Full time

Job summary

IBM Consulting in the United States is seeking an Expert Cyber Defender to protect client networks, analyze data from SIEM/EDR/XDR, and apply MITRE ATT&CK frameworks. You will manage incident investigations and craft actionable remediation guidance for Windows, macOS and Linux environments.

This onsite role at Fort Meade, MD emphasizes collaboration with clients, threat hunting, vulnerability management, and ongoing security posture improvements.

Qualifications

• Experience with MITRE ATT&CK and the Cyber Kill Chain.
• Proficiency with SIEM, SOAR, EDR, XDR tooling.
• Ability to interpret Windows, macOS, Linux logs.
• Certification in cybersecurity (e.g., CISSP) preferred.
• Government cyber ops experience (OPTEMO) preferred.

Responsibilities

• Investigate security incidents using industry tools and MITRE ATT&CK.
• Develop and manage incident reports with actionable guidance.
• Analyze network and endpoint events across systems.
• Participate in vulnerability management and threat intel.
• Provide recommendations to strengthen client security posture.

Skills

Threat analysis

Cybersecurity expertise

Threat hunting

Incident response

Regulatory compliance

Education

Bachelor's degree

Master's degree

Tools

SIEM

SOAR

EDR

XDR

Job description

IBM Consulting in the United States is seeking an Expert Cyber Defender to protect client networks, analyze data from SIEM/EDR/XDR, and apply MITRE ATT&CK frameworks. You will manage incident investigations and craft actionable remediation guidance for Windows, macOS and Linux environments.

This onsite role at Fort Meade, MD emphasizes collaboration with clients, threat hunting, vulnerability management, and ongoing security posture improvements.