Incident Response (IR) Manager

Edgewater Federal Solutions is a privately held government contracting firm located in Frederick, MD, specializing in employee empowerment, exceptional services, and timely delivery for customer missions. The company is ISO 9001, 20000-1, and 27001 certified, appraised at CMMI Level 3 Maturity for Development and Services, and has been recognized as a Top Workplace in the Greater Washington Area Small Companies since 2018.

About the role

This position provides incident response (IR) leadership, management, and support to a team of IR Tier-1, IR Tier-2, and Forensics specialists on a Federal government contract. The role also serves as the “Right-of-Boom” Deputy to the Cybersecurity Operations Task Lead.

Responsibilities

• Provide oversight, leadership, management, work assignment, organization, and administrative duties for a combined team of around 20 cybersecurity specialists specializing in Incident Response and Forensics.
• Deliver robust operational management, planning, oversight, metrics, and reporting for the IR team, supporting audits, assessments, and capability maturity efforts using tools such as Microsoft SharePoint, Excel, PowerPoint, Power Automate, and Power BI.
• Ensure complete, accurate, and timely delivery and/or maintenance of all relevant contract deliverables and ad hoc work products, including briefings, strategy documentation, playbooks, incident tickets and reports, after-action reports, shift change and daily mitigation reports, chain of custody forms, forensics reports, shift schedules, and executive briefings.
• Support the Client’s incident response capabilities, including policy, plan, process, procedures, communication guidelines, team structure, relationship management, service creation or enhancement, training, and documentation.
• Provide Tier-1 cybersecurity detection and response operational support to identify, triage, and mitigate security incidents impacting the confidentiality, integrity, and availability of the Client’s network and systems.
• Ensure accurate categorization of cybersecurity incidents, integration with NIH enterprise security capabilities, threat mitigation, incident response, ticket backlog minimization, and timely notification of incidents to appropriate authorities.
• Oversee Tier-2 and Forensics support, including counterintelligence, insider threat support, and research and development.
• Provide forensics services, including host and appliance-based, mobile devices, network, cloud, and malware forensics.
• Deliver Counterintelligence (CI) and Insider Threat (InTh) services, including internal investigations, law enforcement investigations, and active monitoring.
• Proactively enable, coordinate, collaborate, and recommend ongoing improvements for IR capabilities, providing guidance to Federal (Client) leadership.

Requirements

• 5+ years of comprehensive cybersecurity operations leadership and management experience.
• Bachelor’s Degree or higher in a relevant cybersecurity-related field.
• Demonstrated expert-level delivery experience and knowledge of IR concepts, operations, outputs, and maturity levels.
• Demonstrated expert-level delivery experience and knowledge of Forensics concepts, operations, outputs, and maturity levels.
• Demonstrated expert-level experience with ticket management tools, troubleshooting, investigations, computer networking, and operating systems.
• Proven technical ability and aptitude through prior experience and accomplishments.
• Excellent critical thinking, analytic, and time management skills.
• Strong management, teamwork, and interpersonal skills, especially under tight deadlines.
• Customer-focused approach to meet the needs of internal and external stakeholders.
• Strong presentation development and delivery skills.
• Proficient program management, project management, and task tracking abilities.
• Ability to work occasional weekends and holidays.
• Ability to pass an HHS Tier-2 security clearance background investigation.

Qualifications

• One or more certifications in information security (e.g., CISSP, CISM, CompTIA Advanced Security Practitioner, CompTIA Security Analytics Expert, CCTHP, CySA+, Security+).
• Project Management Certifications (e.g., CAPM, PMP, ITIL).
• Current security clearance (desired).

Pay

$120K - $145K