Top Tech Jobs & Startup Jobs

Support government incident response by producing and reviewing cybersecurity documentation (SOPs, CONOPS, action reports, briefings). Coordinate with incident teams, maintain records, edit to agency style, and produce clear technical narratives under time pressure.

Lead and coordinate cyber incident investigations: triage, scope determination, mitigation planning, and service restoration. Monitor threats, analyze logs/alerts, document incidents through resolution, and recommend layered defense improvements while supporting assigned shifts.

Perform on-site cyber incident response and investigations: characterize breaches, prioritize incidents using NCCIC scoring, analyze alerts and log data, develop mitigation plans, coordinate cross-team information, track incidents to resolution, and provide shift-based support to restore services.

Perform on-site incident response for civilian government and critical assets: investigate breaches, characterize severity, develop mitigation plans, analyze logs, track incidents from detection to resolution, coordinate across teams, and provide shift-based support using CND methodologies and threat actor TTP knowledge.

Lead and coordinate on-site incident response investigations, characterize breach severity, develop mitigation plans, manage case/ticketing records, brief leadership, and support threat/vulnerability and network security monitoring to restore services and prioritize responses.

Lead investigation and triage of cyber incidents, characterize severity, develop mitigation and restoration plans, monitor threat sources, analyze alerts and logs, and document incidents from detection through resolution while providing shift coverage.

Develop and implement automation for ML/LLM integrations and data pipelines to support incident response and automated malware analysis. Build ingestion, transformation, monitoring, API integrations, and scale automation from pilot to production while ensuring data quality and documenting solutions.