Sr Cyber Defense Incident Responder

Why WWT?

World Wide Technology (WWT) is a global technology solutions provider leading the AI and Digital Revolution. Founded in 1990, WWT combines strategy, execution, and partnership to accelerate digital transformation for organizations worldwide. With over 12,000 employees across WWT and Softchoice and more than 60 locations, the company has been recognized 14 years in a row by Fortune and Great Place to Work® for its culture of determination, innovation, and inclusivity.

Government Services Team

The Government Services team provides cleared resources with a global reach to federal civilian, Department of Defense (DoD), and intelligence community markets. The team delivers innovative, operationally ready, and cost‑effective IT solutions that enhance the interoperability and resiliency of mission‑critical systems.

Location

San Antonio, TX – fully on‑site at Lackland AFB. Preferred locations include San Antonio and surrounding areas.

Responsibilities

• Analyze identified malicious activity to determine exploited weaknesses, exploitation methods, and effects on systems and information.
• Characterize and analyze network traffic to identify anomalous activity and potential threats to network resources.
• Conduct research, analysis, and correlation across a wide variety of source data sets (indications and warnings).
• Coordinate with enterprise‑wide cyber defense staff to validate network alerts.
• Document and escalate incidents, including event history, status, and potential impact for further action.
• Identify and analyze anomalies in network traffic using metadata.
• Identify applications and operating systems of a network device based on network traffic.
• Perform cyber defense trend analysis and reporting.
• Perform event correlation using information gathered from multiple enterprise sources to gain situational awareness and assess attack effectiveness.
• Interpret and incorporate data from multiple tool sources.
• Execute all other duties as defined by the Air Force Cyber Security Support Provider (CSSP).

Qualifications

• 6+ years of experience in incident handling/response, cyber threat hunting, computer forensics, and cyber network defense.
• Bachelor’s degree or higher in Cybersecurity, Computer Science, or a related field.
• IAT III 8140 Certification.
• GIAC Certified Forensic Analyst (GCFA) certification.
• Top Secret/SCI security clearance with potential for higher read‑ins.
• Knowledge of computer networking concepts, protocols, and network security methodologies.
• Understanding of risk management processes and methods for assessing and mitigating risk.
• Familiarity with national and international laws, regulations, policies, and ethics related to cybersecurity.
• Strong grasp of cybersecurity principles, threats, vulnerabilities, and operational impacts of lapses.
• Experience with authentication, authorization, and access control methods.
• Proficiency with cyber defense and vulnerability assessment tools, including open‑source solutions.
• Experience developing Palo Alto XOAR playbooks.
• Linux incident response and forensics background.
• Knowledge of IT security principles such as firewalls, DMZs, and encryption.
• Expertise in network traffic analysis, deep packet inspection (DPI), anomaly detection, and traffic pattern analysis using tools like Zeek, Wireshark, NetFlow, and PCAP replay environments.
• Ability to interpret and incorporate data from multiple tool sources.
• Knowledge of intrusion detection methodologies and techniques for host and network‑based intrusions.

Pay

The estimated base pay range for this position is $140,000 – $160,000 annually. Actual salary will depend on factors such as shift, location, experience, skill set, performance, licensure, certification, and business needs. Variable incentive compensation (e.g., bonuses or commissions) may also be available.

Benefits

• Health and Wellbeing: medical, dental, and vision care; onsite health centers; employee assistance program; wellness program.
• Financial Benefits: competitive pay, profit sharing, 401(k) with company match, life and disability insurance, tuition reimbursement.
• Paid Time Off: PTO and sick leave (starting at 20 days per year), 10 holidays, parental leave, military leave, bereavement leave.
• Additional Perks: nursing mother benefits, voluntary legal assistance, pet insurance, employee discount program.