Senior Cyber Defense Incident Responder (Tier 2)

About the role

Resource Management Concepts, Inc. (RMC) is seeking a dedicated Senior Cyber Defense Incident Responder (Tier 2) to join our team and provide 24/7/365 cybersecurity monitoring and detection for the government enterprise network. This role involves conducting in-depth cyber investigations, incident triage, incident management, forensics and threat analysis, collaboration, documentation and training, red team interaction, quality assurance, and supervision.

Responsibilities

• Investigate Cyber Incidents
• Perform in-depth analysis of network and host artifacts (e.g., logs, system images, packet captures) to identify root causes, operational impacts, and enable rapid remediation of threats
• Incident Triage
• Assess the scope, urgency, and potential impact of incidents, identify vulnerabilities, and recommend effective mitigation strategies
• Incident Management
• Manage incidents from detection to resolution, documenting actions and outcomes in compliance with DoD Cyber Incident Handling Program (CJCSM 6510.01B)
• Forensics and Threat Analysis
• Conduct real-time forensic collections, intrusion correlation, threat analysis, and direct system remediation tasks
• Collaboration
• Work closely with subordinate organizations, law enforcement, and counterintelligence teams on high-profile incidents and insider threat investigations
• Documentation and Training
• Update incident response tactics, techniques, and procedures annually, and deliver quarterly training sessions to enhance team readiness
• Red Team Interaction
• Collaborate with Red Teams to validate and enhance incident response capabilities through realistic penetration testing exercises
• Quality Assurance
• Maintain high standards in incident response, ensuring consistent quality and efficiency as assessed by government-defined metrics
• Supervision
• Provide technical oversight to cyber intrusion detection analysis and cyber incident response activities, to include conducting and/or supervising the conduct of shift/crew turnover periods

Requirements

• Requirements Clearance
• Must obtain and maintain an active Top Secret security clearance with SCI eligibility

Qualifications

• Education and Certification
• DODD 8570 IAT Level II Certification
• DODD 8570 CSSP Incident Responder Certification
• In the future, this position will require a DODD 8140 DCWF 531 Cyber Defense Incident Responder Intermediate Proficiency Level qualification (or higher)

Experience

• At least 2+ years in cybersecurity, with hands-on experience in incident response or related roles
• Familiarity with tools such as Tanium, Elastic/Kibana, and Microsoft Defender for Endpoint
• Strong understanding of the DoD environment and cybersecurity frameworks

Skills

• Expertise in forensic analysis, threat hunting, and vulnerability assessment
• Excellent problem-solving abilities and attention to detail
• Strong communication skills for interacting with technical teams, leadership, and external stakeholders

Benefits

• Great place to work with a small company feel
• Tuition assistance
• Pet insurance
• Competitive 401K package

Pay

The current salary range for this position will be $135,000 to $150,000 (annually).

Schedule

This position's schedule is Mon-Fri 12pm-8pm. This position will provide general oversight to four separate shifts that cover 24x7x365.