Cyber Defense Incident Responder

To support a mission-critical DCSA cybersecurity program, the full-time Cyber Defense Incident Responder will detect, analyze, and respond to security incidents affecting cloud-hosted environments, with remote flexibility and a requirement to be onsite up to one day a week at Fort Meade, MD. Key Responsibilities: Monitor AWS, Azure, and Google Cloud environments for malicious activity and analyze logs to identify indicators of compromise Lead incident response activities across the full lifecycle, including identification, containment, and recovery Leverage threat intelligence to identify emerging threats and recommend defensive improvements based on observed tactics Required Qualifications: Five years of hands-on cybersecurity experience in incident response or threat hunting within cloud or hybrid environments Active Top Secret (TS) Clearance, eligible for upgrade to TS/SCI DoD 8570 Information Assurance Program certification at IAT Level II or IAM Level II, with at least one active qualifying certification Bachelor's Degree in Cybersecurity, Information Systems Management, or a related field Practical experience securing AWS, Azure, and/or Google Cloud environments