Top Tech Jobs & Startup Jobs

Provides onsite cyber incident response for government agencies and critical asset owners. Responsibilities include monitoring alerts and threat sources, analyzing logs, identifying infection causes and vulnerabilities, applying threat actor TTPs, prioritizing incidents, researching mitigations, and tracking cases through resolution. The role requires shift support and collaboration across locations, with an active TS/SCI clearance and DHS Suitability.

Maintain and support lab network infrastructure for government cyber incident response operations. Design and configure routers, switches, firewalls, VPNs, storage, and virtual desktop environments; troubleshoot enterprise network and storage issues; assess vulnerabilities; enforce access controls; monitor performance; maintain backups; integrate technologies; and develop SOPs, documentation, and network diagrams.

Designs and optimizes secure, scalable AWS cloud architectures for rapidly deployable cyber incident response and threat hunting engagement kits. Responsibilities include infrastructure-as-code development, automation, security control implementation, CI/CD collaboration, architecture reviews, documentation, cloud service evaluation, and operational troubleshooting. The role requires strong AWS expertise, cloud security knowledge, scripting skills, and the ability to support dynamic mission requirements for a U.S. Government customer.

Conduct network-based cyber defense analysis, including traffic and packet analysis, IDS alert validation, event correlation, incident documentation, threat detection, trend reporting, attack reconstruction, OS fingerprinting, and signature development. The role supports continuous monitoring and incident response using host-, network-, and cloud-based cybersecurity tools.

Performs network forensics and cybersecurity incident response investigations for government and critical infrastructure customers. Analyzes network traffic, intrusion artifacts, device integrity, topology, and anomalous activity to identify threats, characterize attacks, recommend remediation, and develop Computer Network Defense guidance and reports. Supports onsite investigations, customer coordination, threat analysis, intrusion tracking, forensic collection, and incident handling.

Lead Linux systems administration across development, laboratory, and production environments supporting cybersecurity operations. Manage RHEL, Splunk, Ansible, virtualization, storage, patching, troubleshooting, security controls, STIG compliance, access management, monitoring, dashboards, alerts, backups, and automation. Support deployment of new technologies, develop procedures and policies, manage project components, and improve infrastructure security, performance, and reliability.

Designs, builds, secures, and maintains enterprise network and lab infrastructure for government cyber incident response. Responsibilities include investigating vulnerabilities, configuring routers, switches, firewalls, VPNs, and virtual environments; troubleshooting network and storage issues; implementing access controls and backups; monitoring performance; integrating technologies; and developing security procedures and SOPs.

Develop and maintain CI/CD pipelines, infrastructure-as-code, cloud automation, source control, monitoring, and compliance automation for mission-critical AWS deployments. Build scripts and tools, manage containerized environments, troubleshoot active operations, optimize performance, and collaborate with architects and administrators to ensure secure, scalable, repeatable engagement kit deployments.

Develop, review, edit, and maintain cybersecurity technical communications, operational procedures, plans, action reports, SOPs, CONOPS, work instructions, meeting minutes, charts, and executive briefings. Collaborate with incident management teams, cyber analysts, engagement leads, and subject matter experts to produce concise, accurate deliverables under tight deadlines. The role is fully onsite, Monday through Friday, and supports U.S. Government cyber incident response operations.

Monitor and analyze network activity to detect suspicious behavior, intrusions, and malicious cyber activity. Perform packet-level analysis, event correlation, incident documentation, trend analysis, attack reconstruction, and IDS alert validation. Develop and deploy detection signatures, identify exploited weaknesses, and provide cyber defense reporting and escalation for government and critical infrastructure environments.