Cybersecurity Incident Response Lead

Job Title: Cybersecurity Incident Response Lead  Place:9800 Medical Center Drive, Building B Rockville, MD 20850, USA

Position Overview
The Cybersecurity Incident Response Lead is responsible for leading the detection, response, investigation, and remediation of cybersecurity incidents. This role plays a critical part in protecting organizational systems, data, and infrastructure by coordinating incident handling efforts, conducting forensic analysis, and ensuring compliance with federal cybersecurity frameworks and standards.

Key Responsibilities
Lead and coordinate cybersecurity incident response activities across the organization
Perform incident triage, analysis, containment, eradication, and recovery efforts
Conduct digital forensic investigations and threat analysis
Collaborate with federal security teams, internal stakeholders, and external partners
Monitor and analyze security events using SIEM tools (e.g., Splunk, Sentinel)
Develop, implement, and continuously improve incident response procedures and playbooks
Prepare and maintain detailed incident reports, documentation, and after-action reviews
Provide recommendations to strengthen detection, response, and prevention capabilities
Support compliance with federal cybersecurity frameworks and reporting requirements

Required Qualifications
Minimum of 5+ years of experience in cybersecurity incident response
Strong hands-on experience with SIEM platforms (e.g., Splunk, Microsoft Sentinel, or similar)
Experience conducting forensic investigations and threat analysis
Knowledge of federal incident response frameworks and reporting processes
Strong analytical, problem-solving, and communication skills

Preferred Qualifications
GIAC, CEH, or equivalent cybersecurity certification
Experience working in federal or government-regulated environments
Familiarity with NIST incident response standards
Experience mentoring junior analysts or leading response teams

Core Competencies
Incident Handling & Response
Digital Forensics
Threat Detection & Analysis