Cyber Incident Response Analyst

The Opportunity

Our client is seeking a highly motivated Incident Response Analyst to join the Cyber Security Incident Response Team (IRT) supporting the AF DCGS program onsite at Langley AFB, VA. The ideal candidate will have a solid understanding of Windows, Linux, and Cloud environments, networking concepts, and system administration fundamentals, as well as hands‑on experience with SIEMs or other cyber tools used for detection and analysis. Familiarity with the incident response (IR) process, the ability to apply established procedures during investigations, and the skill to provide clear actionable reporting with minimal supervision are essential.

Responsibilities

• Lead and assist in incident response investigations through all phases (detection, containment, eradication, recovery, lessons learned) to ensure the confidentiality, integrity, and availability of the OA DCGS weapon system.
• Utilize ELK/Elastic Stack to perform log analysis, threat detection, and investigations; create and maintain security incident reports and dashboards.
• Escalate and document internal/external security incidents through appropriate ticketing and reporting processes.
• Design, implement, and maintain cybersecurity Standard Operating Procedures (SOPs) and incident response playbooks.
• Maintain documentation of Incident Response (IR) processes and case notes; ensure security testing and evaluations are completed and properly documented.
• Support proactive threat hunting and vulnerability assessments.
• Analyze and correlate logs from varied data sources to identify patterns and anomalies.
• Apply knowledge of Zero‑Day vulnerabilities and Common Vulnerabilities and Exposures (CVEs) to incident handling and remediation.
• Collaborate with cross‑functional teams and external stakeholders as needed.
• Provide guidance for securing information systems and support cyber vulnerability penetration assessments.

Qualifications

• Active Top Secret/SCI security clearance.
• Bachelor’s degree in IT, Computer Science, or related field with 5+ years of experience (or equivalent experience).
• DOD 8140 (8570) IAT Level II (Security+ or equivalent).
• In‑depth understanding of the Incident Response lifecycle.
• Familiarity with cyber security tools and procedures.
• Strong problem‑solving and analytical skills.
• Knowledge of security best practices and standards, including NIST, ISO, and SOC operations.
• Effective written and verbal communication skills for documentation and collaboration.
• Willingness to work in a shift‑based environment, including weekends and holidays, as part of 24/7 operations.
• Desired: AF DCGS experience; proficiency with Elastic Stack (Elasticsearch, Logstash, Kibana); 4–7 years of intelligence network communications or systems administration on Windows and Linux; experience with AWS or other cloud security platforms.
• Background as an ISSO, including STIG/SCAP and vulnerability management.
• Familiarity with tools such as Tanium, Trellix, Eracent, and ACAS.
• Basic scripting skills (Python, PowerShell, Bash).
• Industry‑recognized certifications such as CySA+, PenTest+, GCIH, or equivalent.

Schedule

Shift‑based schedule with required coverage on weekends and holidays as part of 24/7 operations. Up to 10% local travel may be required.

Pay

Proposed salary range for this position is $75,200 – $158,100, subject to factors such as geographic location, contract labor categories, prior experience, skills, education, and certifications.

Benefits

• Comprehensive healthcare coverage.
• Wellness programs.
• Financial and retirement benefits.
• Family support resources.
• Continuing education and professional development opportunities.
• Flexible time‑off benefit.
• Access to robust learning resources.