Description

Lead a team of up to 30 cyber defense analysts in detection, incident response, and recovery coordination while owning the technical direction for resolving enterprise cyber alerts.

This role is on-site.

Responsibilities

• Lead technical direction for CIRT staff to diagnose and resolve enterprise alerts.
• Monitor incident queues, report on ticket status, and coordinate defense tasks.
• Manage team performance through meetings, training, and policy implementation.
• Analyze metrics trends to drive process improvements and roadmap input.
• Field escalated customer issues, resolving them or referring to specialized experts.

Required Skills

• Active Top Secret security clearance with SCI eligibility.
• Ability to obtain DHS suitability prior to employment.
• 10+ years of directly relevant experience in CERT/CIRT environments.
• Hands-on experience with network intrusion detection and response (Protect, Defend, Respond, Sustain).
• Proficiency in log analysis, evidence seizure, forensics, and data recovery.
• Knowledge of network protocols, devices, OS, and secure architectures.
• Understanding of current cyber threat TTPs.
• Proficiency with MS Office Applications.

Preferred Skills

• Experience with Splunk, malware reverse engineering, or computer forensics.
• Scripting experience with Python or Perl.
• Experience with Analyst Notebook or data visualization products.

Key Skills

Education

ANY GRADUATE