Cyber Incident Response Specialist (Top Secret)

This hands-on role will work with security and IT teams to contain threats, support recovery, and improve incident response readiness. • Working knowledge of Windows, Linux, networking, and common attacker techniques.

Cyber Incident Response Specialist
Hanscom AFB, MA
Top Secret Clearance required

We are seeking a Cyber Incident Response Specialist to investigate and respond to cybersecurity incidents. This hands-on role will work with security and IT teams to contain threats, support recovery, and improve incident response readiness.

Responsibilities:
• Investigate security alerts and suspected compromises across networks, endpoints, and systems.
• Analyze logs, network traffic, and endpoint evidence to determine incident scope and impact.
• Coordinate containment, eradication, and recovery activities.
• Preserve evidence and document investigation findings, timelines, and remediation actions.
• Communicate incident status and recommendations to technical teams and stakeholders.
• Help maintain response playbooks and conduct post-incident reviews.

Required qualifications:
• Active Top Secret security clearance.
• Hands-on experience in cybersecurity incident response or security operations.
• Experience with SIEM, endpoint detection and response, and network analysis tools.
• Working knowledge of Windows, Linux, networking, and common attacker techniques.
• Strong troubleshooting, documentation, and communication skills.
• Ability to work onsite in the Boston, MA area for the 6-month engagement.
• Preferred qualifications
• Digital forensics or malware analysis experience.
• Familiarity with NIST incident response guidance and MITRE ATT&CK.
• Relevant certifications such as GCIH, GCFA, or comparable credentials.

#M1
#LI-VH1
Ref: #851-Rockville-S1