Incident Response Engineer

Job Description

The Incident Response engineer will manage security incident response processes, investigate threats, and implement corrective actions to contain and remediate incidents. Analyze security alerts, perform initial triage, determine the scope and impact of incidents, and escalate or coordinate responses with other teams as necessary. R

Responsibilities

Conducting thorough investigations, performing digital forensics and malware analysis, preserving digital evidence, and managing cybersecurity incident and spillage response processes. Develop, maintain, and improve incident response playbooks, participate in threat hunting activities, and conduct post-incident reviews to generate reports and track metrics. Involves configuring and maintaining incident response tools and systems, including SIEM solutions, and contributing to security awareness efforts through training and exercises. Stay current with emerging threats and best practices, assist in security awareness programs, and collaborate with IT and security teams to enhance incident response capabilities and prevent future incidents.

Must have:

• 4 years of experience in security incident response, digital forensics, or cyber investigations
• Must meet DoD 8140 requirements
• Bachelor’s degree (or an additional 4 years of experience)

Security Clearance:

• Active TS/SCI clearance