Cyber Defense Incident Responder Senior

About the role

Lockheed Martin, Rotary Mission Systems Cyber & Intelligence invites you to step up to one of today’s most daunting challenges: the use of advanced electronics to undermine our way of life. As a cyber security professional at Lockheed Martin, you’ll protect the networks that our citizens and the world depend upon each minute: financial assets, healthcare information, critical infrastructure, hazardous materials, and the uninterrupted flow of energy that keeps modern life moving. In this fast-paced, real-world environment, you’ll work with cybersecurity experts on the forefront of threat protection and proactive prevention, drawing on your education and experience as well as Lockheed Martin’s resources to keep the threats at bay.

The scope of this effort encompasses tasks that provide USCYBERCOM with the sustained ability to fulfill its mission to direct, synchronize, and coordinate cyberspace planning and operations to defend and advance national interests in collaboration with domestic and international partners. These tasks include coordinating, synchronizing, deconflicting, and integrating operational planning efforts for full-spectrum cyberspace operations. The anticipated award of this effort is Fall 2026.

As a Cyber Defense Incident Responder – Senior you will provide Cyberspace Operations Support Services (COSS) aligned with the following core disciplines: Cyberspace Operations, Cyberspace Planning, Cyberspace Training and Exercises, Strategy/Policy/Doctrine Development and Campaign, Assessments, Information Technology (IT)/Communications, Business Area Support and Project Management Engagement Activities. You will provide the customer with the sustained ability to fulfill its mission to direct, synchronize, and coordinate cyberspace planning and operations to defend and advance national interests in collaboration with domestic and international partners. These tasks include coordinating, synchronizing, deconflicting, and integrating operational planning efforts for full-spectrum cyberspace operations. You will meet the evolving cyberspace operations mission in support of the Joint warfighter.

Responsibilities

• Solves complex problems related to computer network defense, incident response, insider threat, and computer forensics.
• Monitors, analyzes, and validates threat intelligence to identify, mitigate, and report cyber security threats.
• Provides timely detection, alerting, and response of malicious network activity originating from external and internal threat actors.
• Identifies, develops, and implements resilient countermeasures to reduce risk to the enterprise.
• Responsible for the creation of fused intelligence products based on full analysis and methodologies.

Requirements

• High School Diploma plus 13 years of relevant experience or
• Bachelor’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, Software Engineering, or related discipline from an accredited college or university, plus 10 years of relevant experience or
• Master’s degree in Information Technology, Cybersecurity, Computer Science, Information Systems, Data Science, Software Engineering, or related discipline from an accredited college or university, plus 8 years of relevant experience.

• Experience leading major breach investigations and directed cross‑functional response teams, ensuring rapid containment and coordinated remediation with network and system owners.
• Experience performing real‑time traffic analysis, executed run‑book procedures to isolate affected hosts, and developed containment strategies that limited lateral movement.
• Experience capturing and preserving forensic artifacts for potential legal use while documenting every action in the incident ticketing system to maintain auditability and traceability.
• Experience managing incident‑response staffing, training, and post‑incident lessons‑learned workshops that captured findings and drove continuous process improvements.
• Experience producing concise incident summary reports for senior management and key stakeholders, highlighting root‑cause analysis, remediation status, and recommendations.
• Must possess a current U.S. TS/SCI security clearance with polygraph.

Desired Skills

• Certifications: CISSP, GCIH, GCFA, CISA, or equivalents.
• Proficiency with network analysis tools (Wireshark, Zeek), forensic suites, and SIEM platforms (Splunk, QRadar).
• Strong written and oral communication skills; ability to produce concise executive reports.
• Strategic thinking aligned with mission objectives.
• Ability to lead multidisciplinary teams under pressure.
• Expertise in MITRE ATT&CK framework and incident‑response playbooks.
• Experience in DoD or intelligence‑community cyber environments.

Pay

Full-Time Salary Range: $135,700.00 – $251,900.00

Lockheed Martin considers factors such as scope and responsibilities of the position, candidate’s work experience, education/training, key skills as well as market (work location) and business considerations when extending an offer.