Incident Response Engineer

Location: Arlington, VA

Department: 56219060 - AFS Cyber Strategy Risk and Architecture

Job Description

The Incident Response engineer will manage security incident response processes, investigate threats, and implement corrective actions to contain and remediate incidents. Analyze security alerts, perform initial triage, determine the scope and impact of incidents, and escalate or coordinate responses with other teams as necessary. R

Responsibilities

Conducting thorough investigations, performing digital forensics and malware analysis, preserving digital evidence, and managing cybersecurity incident and spillage response processes. Develop, maintain, and improve incident response playbooks, participate in threat hunting activities, and conduct post-incident reviews to generate reports and track metrics. Involves configuring and maintaining incident response tools and systems, including SIEM solutions, and contributing to security awareness efforts through training and exercises. Stay current with emerging threats and best practices, assist in security awareness programs, and collaborate with IT and security teams to enhance incident response capabilities and prevent future incidents.

Must have:

• 4 years of experience in cyber, security incident response, digital forensics, or cyber investigations

• Bachelors in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology or Software Engineering, OR possess a DoD 8140 Certification

Security Clearance:

• Active Secret, Top Secret, TS/SCI, or TS/SCI with Polygraph clearance required, depending on position