About this position: Cybersecurity Incident Response Manager in Washington, DC, for Bering Straits Professional Services, LLCThe Essential Duties and Responsibilities are intended to present a descriptive list of the range of duties performed for this position and are not intended to reflect all duties performed within the job. Other duties may be assigned. To perform this job successfully, an individual must be able to satisfactorily perform each essential duty. The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions of the position.
Wage/Salary Range: $150k
Applicants will be notified via email or phone within ten business days regarding application status.
Essential Duties & Responsibilities- Lead, mentor, and manage cybersecurity personnel; establish priorities, assign work, assess performance, and support professional development and cross-training.
- Direct the team's incident response activities, including event triage, investigation, containment, eradication, recovery, documentation, and lessons learned. Coordinate with the SOC and client leadership to support timely escalation and reporting.
- Oversee the collection and analysis of cyber threat intelligence, ensuring that relevant indicators and adversary tactics, techniques, and procedures guide detection, threat hunting, incident response, and penetration testing activities.
- Guide hypothesis-driven threat hunts, digital forensic investigations, and malware analysis. Ensure evidence is collected, preserved, and documented in accordance with applicable requirements and chain-of-custody procedures.
- Manage authorized penetration testing, adversary emulation, and purple team exercises in coordination with federal leadership. Track findings and work with stakeholders to validate corrective actions.
- Lead the practical application of AI and ML to improve threat hunting and incident response, including evaluating use cases, guiding development and integration, and measuring effectiveness. Oversee the use of applicable Microsoft Azure AI services in accordance with client security and data-handling requirements.
- Maintain and improve incident response plans, playbooks, standard operating procedures, and detection and automation workflows. Coordinate tabletop exercises and incorporate lessons learned.
- Monitor workload, operational performance, risks, and deliverables; provide clear status reports, metrics, and briefings to technical stakeholders and senior leadership.
- Coordinate with client stakeholders and other teams on investigations, audits, information requests, and continuous improvement. Align activities with applicable federal requirements, client policies, and NIST guidance
Required (Minimum Necessary) Qualifications - Education Requirements: High school diploma or GED and substantial relevant cybersecurity experience; a bachelor's degree in cybersecurity, computer science, or a related field is preferred
- Level of Experience Requirements: 5 years of demonstrated IT experience
- Demonstrated experience leading cybersecurity personnel or coordinating multidisciplinary security operations and complex incident investigations.
- Strong knowledge of incident response, threat intelligence, threat hunting, digital forensics, and penetration testing principles, including the ability to translate technical findings into operational decisions.
- Experience with enterprise security technologies such as SIEM, endpoint detection and response, network monitoring, and cloud security tools. Familiarity with Microsoft Azure, Microsoft Sentinel, and Microsoft Defender is expected.
- In-depth knowledge of AI and ML concepts and practical experience applying these technologies to cybersecurity use cases, including threat hunting or incident response. Experience with Microsoft Azure AI services.
- Familiarity with the MITRE ATT&CK framework, NIST incident response guidance, and federal cybersecurity reporting and security requirements.
- Strong written and verbal communication, analytical, decision-making, and stakeholder management skills.
- S. citizenship and the ability to obtain and maintain the government security access required for the position, subject to applicable investigation and eligibility requirements.
Knowledge, Skills, Abilities, and Other Characteristics - Experience supporting a federal cybersecurity program and coordinating with a 24/7 SOC.
- Experience with Kusto Query Language, Python or PowerShell, Azure DevOps, or Power BI.
- Relevant certifications such as GIAC Certified Incident Handler (GCIH), Certified Information Systems Security Professional (CISSP), Microsoft Security Operations Analyst Associate, or a relevant Azure AI certification
Preferred Necessary Physical Requirements The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this role. Employees must always maintain a constant state of mental alertness. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.
Work Environment The work environmental characteristics described here are representative of those that must be borne by an employee to successfully perform the essential functions of the role. Employees must always maintain a constant state of situational awareness. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.
Supervisory Responsibilities- This position will have supervisory responsibilities.
DOT Covered/Safety-Sensitive Role Requirements - This position is not subject to federal requirements regarding Department of Transportation "safety-sensitive" functions.
Additional Qualifying FactorsAs a condition of employment, you will be required to pass a pre-employment drug screening and have acceptable background check results. If applicable to the contract, you must also obtain and maintain the appropriate clearance levels required and must also be able to obtain access to military installations.
Shareholder Preference BSNC gives hiring, promotion, training, and retention preference to BSNC shareholders, shareholder descendants and shareholder spouses who meet the minimum qualifications for the job.
