Incident Response (IR) and Forensics Lead (Q Clearance)
On-siteGermantown, Maryland, United States
Job Summary
Manage day-to-day operations of the IR and forensics team, conducting briefings and coordinating directly with customers to develop IRs for senior federal leadership. Collect and analyze intrusion artifacts, including source code, malware, and trojans, to support mitigation of potential cyber defense incidents across the enterprise. Provide expert technical support to enterprise-wide cyber defense technicians and monitor external data sources from vendor sites and Computer Emergency Response resources. This role coordinates IR functions while performing hands-on investigations, forensic analysis, and response activities for high-profile public and private-sector clients.
Required Qualifications
- Knowledge of IR and digital forensics principles and practices
- Understanding of cybersecurity operations, including cloud security, endpoint security, access management and secure networking
- Knowledge of security risk assessment and cyber incident analysis
- Bachelor's degree or Associate's degree plus an additional 2+ years of experience
- 7+ years of relevant experience
- Proven ability to analyze complex requirements and translate them into clear, actionable tasks and processes through critical thinking
- Applicants must currently hold and maintain an active DOE Q or equivalent DoD Top Secret clearance
- Onsite (Germantown, MD)
Desired Qualifications
- Industry recognized certifications
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.