One of our premier clients is seeking an Incident Response & Forensics Team Lead for their growing team. This role is worked mostly remote with occasional strategic meetings in either the Germantown or DC offices. So need to be in a drivable difference from either location. Role REQUIRES an Active Top Secret clearance per our client! Job description:
''This is a hands-on role, responsible for managing a team and performing investigations, analysis, and responses to cyber incidents.
This role provides technical support in areas of cyber security to include cloud security, endpoint security, access management, secure networking and incident response.
We need someone with cyber incident investigation and forensics experience (GCFE, GCIH or CySA); experience on EnCase or Cellebrite tooling would be great too.
The ideal candidate will have a background in incident handling and forensics that has been matured into a mid-level PM.
Responsibilities include, but are not limited to:
• Manage day to day operations of the team
• Perform briefings, direct coordination with the customer, develop responses to incidents to upper Federal Leadership
• Collect intrusion artifacts (e.g., source code, malware, trojans) and use discovered data to enable mitigation of potential cyber defense incidents within the enterprise.
• Coordinate and provide expert technical support to enterprise-wide cyber defense technicians to resolve cyber defense incidents.
• Coordinate incident response functions.