We are seeking a
Cybersecurity Incident and Application Lead to join our team and support our client. The ideal candidate is a strong incident response and application security professional who remains calm under pressure and brings deep technical knowledge across network security, web application security, cloud technologies, and threat detection. This individual is motivated by protecting enterprise systems, improving response readiness, and working collaboratively to resolve high-priority cybersecurity events.
Essential Duties and Responsibilities:- Lead the full lifecycle of incident detection, analysis, containment, recovery, and post-incident activities across enterprise systems.
- Coordinate incident response efforts, manage escalations, and support cross-functional response activities.
- Monitor, detect, and report suspected cybersecurity incidents using enterprise logging, SIEM, EDR, IAM, antivirus, and cloud tools.
- Configure alerts and reporting to help identify indicators of compromise, suspicious behavior, and insecure configurations.
- Track incidents through remediation and support the development of lessons learned, SOPs, and process improvements.
- Assist with incident response testing, reporting, and stakeholder communications.
Work Experience and Job Skills:- Minimum of 5-7 years of hands-on experience in network security, web application security, and cloud technologies.
- Strong knowledge of ports, protocols, weak configurations, vulnerable services, and common intrusion techniques.
- Experience applying incident response processes across preparation, detection and analysis, containment, recovery, and post-incident review.
- Hands-on experience with technologies such as Splunk, Tenable, FireEye, IDS/IPS platforms, and related event analysis tools.
- Good understanding of Windows and Linux operating systems.
- Ability to create management reports, escalation documentation, and incident response process materials.
Education:- Bachelor's Degree is required. Preferred field of study in Computer Science, Information Technology, Information Systems, Operations Management, or related field of study.
- MBA/Master's Degree in a relevant field of study preferred.
Certificates, Licenses and Registrations:- Desired certifications include ECIH, OSCP, GCIH, and Splunk certifications.
Communication Skills:- Excellent verbal and written skills, ability to present proposals and performance data, comfortable interfacing all levels of organization.
- Ability to write clear and concise creative content in a highly confidential manner.
Clearance Requirements:- Ability to obtain and maintain a Public Trust clearance.
Travel:- Work under this task order is expected to be performed primarily remotely at the contractor's non-Federally controlled facility.
- Key personnel are expected to work onsite in Bethesda, Maryland two days per week, with onsite schedules and working hours subject to approval by Federal staff.
- Additional onsite meetings or temporary support within Federally controlled facilities may be required based on program needs.
Environmental Requirements:- Mainly a routine office environment.
- May be required to lift up to ten (10) pounds
- Flexible in working extended hours
The above statements are intended to describe the general nature and level of work being performed by the individual(s) assigned to this position. They are not intended to be an exhaustive list of all duties, responsibilities, and skills required. Unissant management reserves the right to modify, add, or remove duties and to assign other duties as necessary. In addition, where applicable and available, reasonable accommodation(s) may be made to enable individuals with disabilities to perform essential functions of this position.
Please note: Candidate(s) will be required to go through pre-employment screening.
