Top Tech Jobs & Startup Jobs

Provides onsite cyber incident response for government agencies and critical asset owners. Responsibilities include monitoring and analyzing network alerts and log data, identifying threats and vulnerabilities, researching mitigation steps, determining incident causes, applying threat actor knowledge, coordinating information across teams, and tracking incidents through resolution. The role requires active TS/SCI clearance, U.S. citizenship, DHS Suitability, and at least two years of relevant cybersecurity or incident management experience.

Perform advanced hardware and firmware reverse engineering on OT/ICS and network-edge devices, extract embedded malware, analyze proprietary hardware and protocols, develop forensic SOPs, train analysts, support live incident response, and collaborate on microelectronics exploitation and emulation research.

Lead and coordinate cyber incident investigations, triage and prioritize alerts, determine scope and impact, develop mitigation plans, and support restoration. Monitor threat intelligence sources, document incidents from detection through resolution, and collaborate with stakeholders during assigned shifts to defend enterprise networks.

Lead and document cyber incident investigations, characterize breach severity, develop mitigation plans, analyze log/alert data, monitor threat intelligence sources, coordinate remediation across teams, and provide shift-based incident response support.

Provide frontline DFIR and proactive network hunting: analyze network traffic, validate and escalate alerts, perform packet-level and trend analysis, develop signatures, reconstruct attacks, and produce reports to support mission-critical cyber defense.

Support onsite incident response by investigating breaches, developing mitigations, restoring services, managing lab infrastructure, administering networks, VPN/VDI support, troubleshooting user issues, and maintaining storage and access controls.

Analyze network traffic to detect and characterize intrusions, validate alerts, perform packet- and signature-level analysis, reconstruct attacks, develop/deploy signatures, produce trend and incident reports, and coordinate remediation with enterprise cyber defense teams.

Support government cyber incident response by investigating breaches, developing mitigations, restoring services, managing lab infrastructure, administering systems (Linux/Unix, MacOS/iOS), supporting VPN/VDI, troubleshooting storage and networking, creating SOPs, and providing user helpdesk and account management.

Perform network-focused DFIR and proactive hunting: collect and analyze network artifacts (PCAP, logs), assess topologies and device integrity, support onsite incident response, recommend mitigations, and coordinate with government leads during investigations.

Perform frontline DFIR and proactive network hunting: collect and analyze network intrusion artifacts (PCAP, metadata), assess topologies and device configurations, coordinate incident response teams, produce CND guidance and reports, brief stakeholders, and advise on remediation during onsite engagements.