Senior Cybersecurity Incident Response Engineer
Job Description
Senior-level incident response role focused on enterprise SIEM operations, event investigation, and DoD-aligned compliance activities.
Responsibilities
- Design and build SIEM dashboards to surface security events and support near real-time anomaly and threat detection
- Monitor SIEM dashboards, investigate relevant security events, and escalate when needed
- Define reporting requirements that support audits and security controls
- Provide PKI support, including management of SSL/TLS certificates
- Track DoD web application security standards and newly disclosed vulnerabilities
- Review and assess cyber tasking orders, determine applicability, and coordinate required changes
- Collaborate with cybersecurity service providers on audit logging and incident response
- Participate in software assurance reviews and review system designs for security compliance
Requirements
- Active Security Clearance Required
- 10+ years in cybersecurity and incident response or related areas
- Extensive experience managing SIEM systems, including ensuring the right data is ingested into the SIEM
- Proven skill building and managing SIEM dashboards that display security events
- Strong ability to monitor and investigate security events and anomalies
- Experience defining reporting requirements for audits and security controls
- Knowledge of PKI and SSL/TLS certificate management
- Familiarity with DoD web application security standards and best practices
- Ability to review and respond to cyber tasking orders
- Experience working with cybersecurity service providers on audit logs and incident response
- Experience with software assurance reviews for validating application audit logs
- Ability to review information system design plans for security compliance
- Cybersecurity certification (e.g., CISSP, ISSEP, Security+, CEH)
Technologies
- SIEM
- SSL/TLS
- PKI
Preferred Qualifications
- Bachelor’s degree in computer science or equivalent experience
- Familiarity with DoD enterprise monitoring tools and practices
- Strong analytical, problem-solving, communication, and coordination skills
- Incident response experience
- Knowledge of engineering change proposals and configuration management
- Understanding of continuity of operations (COOP) and communication plans
- Ability to work well on a team and with many stakeholders
Education
- Bachelor’s degree in computer science or equivalent experience (preferred)
Certifications
- CISSP, ISSEP, Security+, CEH, or equivalent
Location: Radford, VA (onsite)
Salary: USD 90,000 - 110,000 per year