incident response lead

Space Dynamics Laboratory

<div><p><b>Job ID: 7339</b><br>
<b>Date Posted: April 7, 2026</b><br>
<br>
Space Dynamics Laboratory (SDL) is seeking a highly skilled Cybersecurity Analyst &ndash; Incident Response Lead to join our Corporate Information Security team. The selected candidate will serve as the technical lead for incident response and forensic investigations, supporting SDL&rsquo;s mission to protect critical information systems in support of national defense and space operations.<br>
As a key member of the Cybersecurity Operations team, this individual will lead the detection, analysis, containment, and remediation of cybersecurity incidents, while advancing SDL&rsquo;s incident response and forensic capabilities.<br>
<br>
If you thrive in high-tempo environments, have deep technical expertise, and are passionate about defending mission-critical systems, we encourage you to apply.<br>
<br>
As a trusted partner in national defense and space exploration, SDL offers a dynamic, mission-driven environment where your expertise will directly contribute to critical security initiatives. If you thrive in high-stakes, team-oriented settings and have a passion for cybersecurity compliance, risk management, and audit excellence, we want to hear from you!<br>
<br>
<b>Key Responsibilities:</b></p><ul><li>
Leads end-to-end incident response activities, including identification, containment, eradication, and recovery
</li><li>Serves as the technical lead during security incidents, coordinating across IT, Cybersecurity Engineering, Governance, Risk and Compliance (GRC) and leadership
</li><li>Develops and maintains incident response playbooks and procedures
</li><li>Conducts and leads incident response exercises and tabletop scenarios
</li></ul><ul><li>Performs host-based, network-based, and log-based forensic analysis
</li><li>Preserves evidence in accordance with legal and regulatory requirements
</li><li>Conducts root cause analysis and produces detailed forensic reports
</li><li>Supports internal investigations and external reporting requirements
</li></ul><ul><li>Analyzes alerts from SIEM, EDR, EPP, and other tools to identify potential threats
</li><li>Correlates logs across multiple data sources to identify attack patterns and indicators of compromise (IOCs)
</li><li>Conducts threat hunting activities to proactively identify adversary behavior
</li><li>Integrates threat intelligence into detection and response processes
</li></ul><ul><li>Develops and refines detection use cases and alerting logic
</li><li>Recommends and implements improvements to incident response processes and tooling
</li><li>Automates response workflows where feasible
</li><li>Tracks metrics and performance of incident response capabilities
</li></ul><ul><li>Coordinates with GRC teams to ensure incidents are properly documented and aligned with compliance requirements
</li><li>Communicates incident status, impact, and remediation actions to stakeholders
</li><li>Supports CMMC assessment activities related to incident response and logging</li></ul><br>
<b>
Required Qualifications (Must-Have Skills &amp; Education):</b><ul><li>
5+ years of experience in cybersecurity, with a focus on incident response and/or security operations
</li><li>Bachelor&rsquo;s degree in cybersecurity, information assurance, computer science, MIS, engineering, or a related field (or additional 5 years of experience)</li><li>
Relevant certification (e.g., CySA+, GCIA, GCIH, CISSP)
</li><li>Hands-on experience with: Incident response processes and frameworks (e.g., NIST SP 800-61), SIEM platforms (e.g., Splunk, Microsoft Sentinel), Endpoint Detection &amp; Response (EDR) tools, Log analysis and event correlation
</li><li>Experience conducting forensic investigations (disk, memory, or network)
</li><li>Strong understanding of attacker tactics, techniques, and procedures (TTPs)
</li><li>Ability to analyze and interpret Indicators of Compromise (IOCs)
</li><li>Strong analytical and problem-solving skills
</li><li>Excellent written and verbal communication skills
</li><li>Must be a U.S. citizen with the ability to obtain and maintain a U.S. Government security clearance</li></ul><br>
<b>
Preferred Qualifications (Nice-to-Have Skills &amp; Experience):</b><ul><li>
Technical Expertise<ul><li>
Experience with forensic tools (e.g., EnCase, FTK, Velociraptor, Volatility)
</li><li>Familiarity with threat intelligence platforms and frameworks (e.g., MITRE ATT&amp;CK)
</li><li>Experience with digital forensics in cloud environments
</li></ul></li><li>Compliance &amp; Regulatory Experience<ul><li>
Familiarity with NIST SP 800-171, NIST SP 800-53, DFARS, and CMMC
</li><li>Experience supporting compliance assessments, inspections or audits</li></ul></li><li>
Government &amp; Defense Experience<ul><li>
Experience supporting DoD, intelligence, or defense contractor environments
</li><li>Understanding of classified systems security (RMF, JSIG, DISA STIGs) requirements (RMF, JSIG, STIGs)</li></ul></li><li><b>Salary Range</b></li><li>
$90,000 - $155,000<ul><li>
Salary commensurate on education and relevant experience</li></ul></li></ul><div><br>
This range serves as a general guideline and may vary based on factors such as role, level, location, market conditions, and individual qualifications, including job-related skills, experience, and relevant education or training. The range displayed in the job advertisement reflects the minimum and maximum target salaries across all US locations. Specific salary details for a candidate&rsquo;s preferred location can be provided by the recruiter or HR manager during the hiring process.<br>
<br>
<b>Why Join SDL?</b><br>
<ul><li>SDL offers competitive salaries and <b>a comprehensive benefits package</b>. Visit our <b>Benefits Page</b> to learn more about what we offer.
</li></ul><br>
SDL delivers advanced multi-domain solutions to protect national security and enable scientific discovery. Our expertise in satellites, sensors and instruments, ground systems and data processing, and autonomous systems plays a critical role in missions supporting NASA and the Department of Defense. Join our team of engineers, scientists, technicians, and business professionals in our seventh decade of delivering mission success.<br>
<br>
At SDL, we strive to uphold a culture of respect, collaboration, empowerment, and accountability. We listen with open minds, seek to understand diverse perspectives, and engage in thoughtful dialogue. We work together by sharing knowledge, involving others, and offering support. We trust and empower our team members to take ownership, act with integrity, and be accountable. Above all, we deliver on our commitments to each other and to our mission partners.<br>
<br>
The application window for this position is expected to remain open for approximately 14 days; however, it may be shortened or extended depending on business needs and the availability of qualified candidates. We encourage interested candidates to submit their applications promptly.</div><p>
For questions, assistance, or accommodation with the application process or the DoD SkillBridge program, please contact employment@sdl.usu.edu.</p>
<p></p><p>SeuYdCudaJ</p></div>

Cybersecurity Analyst - Incident Response Lead

البنك التجاري الدولي

<div></div><div><div>Description<div></div><p><br>
JOB PURPOSE</p>
<p>
To oversee and manage the Security Operations Center (SOC) related activities including, threat monitoring, triage and response to develop detailed root cause analysis and escalate for emergency response as per the approved process.</p><br>
<p>
</p><p>Description</p>
<p>
Security Incident Response Management</p>
<p>
1. Provide management oversight for the identification, triage and response of events or incidents of apparent security breaches to maintain the security posture.
</p><p>2. Conduct Security event analysis reporting on activities through regular scheduled reporting and communications in order to highlight the main incidents and events.
</p><p>3. Identify and handle incidents, which need special attention or escalation to secure the overall bank&rsquo;s security and mitigate potential risks.
</p><p>4. Direct the creation and maintenance of incident response run books of the Analysts team run-books.</p>
<p>
5. Act as a lead throughout incident scenarios and provide subject matter expertise in cybersecurity incident response to facilitate the investigation and root cause analysis.</p>
<p>
6. Ensure proper reporting for daily, monthly, quarterly and annual security posture, SOC and executive reporting and dashboards.</p>
<p>
7. Recommend security solutions based on security postures and gaps identified.</p>
<p>
8. Manage communication with other departments to facilitate investigation process.</p>
<p>
9. Develop and update SLA between SOC and other departments when required and maintain SLA.</p>
<p>
Strategy</p>
<p>
10. Participate in the formulation and implementation of the Security Operations Center Department strategy to ensure the alignment with CIB strategy</p>
<p>
Policies, Processes and Procedures</p>
<p>
11. Participate and recommend improvements to policies, processes and procedures and manage their implementation to ensure all relevant procedural/legislative requirements are carried out.</p>
<p>
Day-to-day Management</p>
<p>
12. Supervise the day to day operations of the Incident Management &amp; Response team providing some guidance in the related area, encouraging teamwork and facilitating related professional work processes in order to achieve high performance standards</p>
<p>
Supervision</p>
<p>
13. Supervise the activities and work of subordinates to ensure that all work within a specific area is carried out in an efficient manner and in compliance with the set policies, processes and procedures</p>
<p>
Compliance</p>
<p>
14. Ensure compliance with all relevant CBE regulations, banking laws, AML regulations and internal CIB policies and code of conduct in order to maintain CIB&rsquo;s sound legal position and mitigate any potential risks</p><div><br>
</div></div><div>
Qualifications<div></div><p><br>
Qualifications &amp; Experience</p>
<ul><li> Bachelor&rsquo;s degree of Engineering, Computer Science or equivalent</li></ul>
<ul><li> Minimum 8 - 10 years of experience in IT Security or related fields</li></ul>
<ul><li> Strong understanding of incident handling procedures
</li></ul><ul><li> Experience with packet and log analysis using commercial and open source tools</li></ul>
<ul><li> Recommended Certifications:</li></ul>
<p>
o Certified Information Systems Security Professional (CISSP)</p>
<p>
o Certified Information Security Manager (CISM)</p>
<ul><li> Mandatory Certification:</li></ul>
<p>
o GIAC Certified Incident Handling (GCIH)</p><br>
<p></p>
<p>
Skills</p>
<ul><li> Very good command of English and Arabic language</li></ul>
<ul><li> Very good Analytical skills</li></ul>
<ul><li> Very good Communication skills</li></ul>
<p>
Very good MS Office skills<br>
</p><div>
</div></div><div>Primary Location: Egypt-Giza-SMART VILLAGE BLDG. 2</div><div>
Job: Back Office</div><div>
Organization: FINANCE, STRATEGY, OPERATIONS &amp; TECHNOLOGY</div><div>
Shift: Day Job</div><div>
Job Type: Full-time Employee</div></div>

SECURITY INCIDENT RESPONSE MANAGER

VaporVM

<div><div><div><b>Date Posted:</b></div>
10 April, 2026</div>
<div><div><b>Industry:</b></div>
IT Services and IT Consulting</div>
<div><div><b>Location:</b></div>
VaporVM</div></div>
<br><div><h2 class="jobSectionHeader"><b>Job Description:</b></h2>
<div><h2 class="jobSectionHeader"><b>Job Summary</b></h2>
<p>
We are seeking a highly experienced and results-driven <b>Principal Information Security Engineer / SOC Lead</b> to lead advanced cybersecurity operations, threat detection, and data protection initiatives. The ideal candidate will have deep expertise in <b>SOC operations, SIEM, Microsoft XDR ecosystem, DLP, DevSecOps, and cloud security</b>, with proven experience in leading teams, managing incidents, and strengthening enterprise security posture.</p>
<h2 class="jobSectionHeader"><b>
Key Responsibilities</b></h2>
<h3 class="jobSectionHeader"><b>   </b><b>Security Operations &amp; Incident Response</b></h3>
<ul><li>Lead Tier-2 SOC operations, ensuring continuous monitoring and rapid response to security incidents</li>
<li>Perform in-depth analysis of security alerts, logs, and threat intelligence feeds</li>
<li>Conduct threat hunting using advanced tools such as Microsoft Defender XDR</li>
<li>Lead incident response activities, including root cause analysis and forensic investigations</li>
<li>Ensure timely escalation and resolution of incidents in line with SLA requirements</li>
</ul>  <h3 class="jobSectionHeader"><b>️ </b><b>SIEM, XDR &amp; Security Monitoring</b></h3>
<ul><li>Design, deploy, and manage SIEM solutions (e.g., IBM QRadar, Microsoft Sentinel)</li>
<li>Manage and optimize <b>Microsoft XDR stack</b>:
<ul><li>Microsoft Defender for Endpoint</li>
<li>Microsoft Defender for Identity</li>
<li>Microsoft Defender for Cloud</li>
<li>Microsoft Defender for O365</li>
</ul></li><li>Develop and fine-tune detection rules, use cases, and correlation logic</li>
<li>Integrate threat intelligence feeds to enhance detection capabilities</li>
<li>Maintain dashboards and reporting for management visibility</li>
</ul>   <h3 class="jobSectionHeader"><b>Data Loss Prevention (DLP) &amp; Compliance</b></h3>
<ul><li>Lead end-to-end <b>DLP program</b>, including strategy, deployment, and governance</li>
<li>Define and manage DLP policies, classification, and data protection controls</li>
<li>Handle DLP incidents, investigations, and remediation</li>
<li>Ensure compliance with <b>global data protection regulations (EU/US)</b> and industry best practices</li>
<li>Generate executive reports on DLP metrics, risks, and effectiveness</li>
</ul><ul><li><b>️ </b><b>Cloud Security &amp; DevSecOps</b></li></ul>
<ul><li>Monitor and secure cloud environments (Azure, AWS) using tools like Azure Monitor and AWS CloudWatch</li>
<li>Implement <b>DevSecOps practices</b> and integrate security into CI/CD pipelines</li>
<li>Conduct code reviews and vulnerability assessments for secure application deployment</li>
<li>Secure microservices architecture through authentication, authorization, and encryption</li>
</ul>   <h3 class="jobSectionHeader"><b>Vulnerability Management &amp; Security Testing</b></h3>
<ul><li>Perform <b>Vulnerability Assessment &amp; Penetration Testing (VAPT)</b></li>
<li>Identify, assess, and remediate vulnerabilities across infrastructure and applications</li>
<li>Conduct risk assessments and recommend mitigation strategies</li>
</ul>   <h3 class="jobSectionHeader"><b>Security Tools &amp; Infrastructure Management</b></h3>
<ul><li>Manage and optimize enterprise security tools including:
<ul><li><b>Imperva WAF</b> (web application protection)</li>
<li><b>CyberArk PAM</b> (privileged access management)</li>
<li><b>Microsoft Intune</b> (endpoint and device management)</li>
<li><b>Microsoft Purview</b> (DLP, compliance, insider risk)</li>
<li><b>Fortinet Firewalls &amp; VPNs</b></li>
<li><b>Forescout NAC</b> (network access control)</li>
<li><b>Zscaler</b> (Zero Trust &amp; secure access)</li>
</ul></li><li>Ensure continuous improvement, health checks, and performance optimization</li>
</ul>   <h3 class="jobSectionHeader"><b>Leadership &amp; Collaboration</b></h3>
<ul><li>Lead and mentor SOC and DLP teams</li>
<li>Collaborate with IT, DevOps, and business stakeholders during incidents and projects</li>
<li>Manage vendor relationships and evaluate new security technologies</li>
<li>Support audits and regulatory compliance initiatives</li>
</ul><h2 class="jobSectionHeader"><b>Required Skills &amp; Qualifications</b></h2>
<ul><li>Master&rsquo;s or Bachelor&rsquo;s degree in Information Security, Cybersecurity, or related field</li>
<li>6&ndash;10+ years of experience in cybersecurity, SOC, or information security roles</li>
<li>Strong expertise in:
<ul><li>SIEM (QRadar, Sentinel)</li>
<li>Microsoft XDR &amp; Defender suite</li>
<li>DLP solutions (Forcepoint, Microsoft Purview)</li>
<li>Cloud security (Azure, AWS)</li>
<li>DevSecOps &amp; CI/CD security</li>
</ul></li><li>Hands-on experience with:
<ul><li>WAF, PAM, EDR/XDR, Firewalls, NAC, Zero Trust solutions</li>
</ul></li><li>Strong knowledge of:
<ul><li>Networking, Active Directory, Linux</li>
<li>Threat intelligence, incident response, and forensics</li>
</ul></li><li>Excellent analytical, problem-solving, and communication skills</li>
</ul><h2 class="jobSectionHeader"><b>Certifications (Preferred / Required)</b></h2>
<ul><li><b>CEH (Certified Ethical Hacker)</b></li>
<li><b>CHFI (Computer Hacking Forensic Investigator)</b></li>
<li><b>Microsoft Azure Administrator (AZ-104)</b></li>
<li><b>ISO/IEC 27001</b></li>
<li><b>SOC Analyst Certification (LetsDefend or equivalent)</b></li>
<li>DLP / Security certifications (Forcepoint, etc.)</li>
</ul><h2 class="jobSectionHeader"><b>Key Competencies</b></h2>
<ul><li>Leadership &amp; team management</li>
<li>Strategic security planning</li>
<li>Incident response expertise</li>
<li>Risk assessment &amp; mitigation</li>
<li>Strong reporting &amp; stakeholder communication</li></ul></div></div><p></p>

Principal Information Security Engineer

<div><div>This is an incredible opportunity to be part of a company that has been at the forefront of AI and high-performance data storage innovation for over two decades. DataDirect Networks (DDN) is a global market leader renowned for powering many of the world's most demanding AI data centers, in industries ranging from life sciences and healthcare to financial services, autonomous cars, Government, academia, research and manufacturing.</div><div></div><div><b><br>
&quot;DDN's A3I solutions are transforming the landscape of AI infrastructure.&quot; &ndash; IDC</b></div><div></div><div><b><i><br>
&ldquo;The real differentiator is DDN. I never hesitate to recommend DDN. DDN is the de facto name for AI Storage in high performance environments&rdquo; - Marc Hamilton, VP, Solutions Architecture &amp; Engineering | NVIDIA</i></b></div><div></div><div><br>
DDN is the global leader in AI and multi-cloud data management at scale. Our cutting-edge data intelligence platform is designed to accelerate AI workloads, enabling organizations to extract maximum value from their data. With a proven track record of performance, reliability, and scalability, DDN empowers businesses to tackle the most challenging AI and data-intensive workloads with confidence.</div><div></div><div><br>
Our success is driven by our unwavering commitment to innovation, customer-centricity, and a team of passionate professionals who bring their expertise and dedication to every project. This is a chance to make a significant impact at a company that is shaping the future of AI and data management.</div><div></div><div><br>
Our commitment to innovation, customer success, and market leadership makes this an exciting and rewarding role for a driven professional looking to make a lasting impact in the world of AI and data storage.</div><div><br>
The<b> Director of Incidents and Escalations</b> is responsible for overseeing the management, resolution, and prevention of critical incidents, ensuring the highest level of operational continuity and customer satisfaction. This role will lead a team of escalation engineers and incident managers, working closely with cross-functional teams such as Engineering, Product Management, and Account teams, to ensure swift issue resolution and proactive problem prevention. The director will be the key point of contact for major customers, working to continuously improve incident response processes, reduce time-to-resolution, and enhance customer satisfaction.</div><div></div><div><b><br>
Key Responsibilities:</b></div><ul><li><b>
Incident Management</b>: Lead and coordinate the resolution of major incidents, ensuring efficient triage, response, and communication during critical outages or disruptions.</li><li><b>
Escalation Oversight</b>: Serve as the primary escalation point for complex customer issues, working closely with senior leadership to drive solutions and manage customer expectations.</li><li><b>
Customer Satisfaction</b>: Own the customer experience during high-severity incidents and escalations, ensuring clear communication and alignment between customers, support teams, and internal stakeholders.</li><li><b>
Operational Efficiency</b>: Design and implement best practices for incident management, leveraging automation and AI tools to reduce incident response time and increase resolution accuracy.</li><li><b>
Team Leadership</b>: Lead and mentor the incidents and escalation teams, ensuring continuous professional development, cross-training, and effective team collaboration.</li><li><b>
Cross-functional Collaboration</b>: Collaborate with Product Development, Engineering, and other departments to identify root causes of incidents, driving long-term product and service improvements.</li><li><b>
Process Improvement</b>: Develop and maintain key performance indicators (KPIs) for incident management, continuously improving processes for faster resolution times and closed loop process improvements.</li><li><b>
Strategic Initiatives</b>: Partner with senior leadership to develop and execute strategic initiatives aimed at improving incident response and reducing future incidents, including the introduction of proactive monitoring tools and AI-driven insights.</li></ul><div><b>
Requirements:</b></div><ul><li><b>
Experience</b>: 10+ years of experience in a technical support or operations role within the technology, storage, or managed services industry, with at least 5 years in a leadership position overseeing escalations or incident response.</li><li><b>
Leadership</b>: Proven experience leading cross-functional teams and managing critical incidents under high-pressure situations.</li><li><b>
Technical Expertise</b>: Strong understanding of computer storage technologies (e.g., SAN, NAS, cloud storage, etc.), infrastructure management, network operations, and performance monitoring tools.</li><li><b>
Communication</b>: Excellent communication and interpersonal skills, with the ability to influence both technical teams and non-technical stakeholders.</li><li><b>
Problem-Solving</b>: Strong analytical and problem-solving abilities, with the capability to think strategically and drive continuous improvement in incident and escalation processes.</li><li><b>
Customer Focus</b>: Demonstrated experience managing customer expectations and fostering strong relationships with strategic accounts, including experience working with SLAs and SLOs.</li><li><b>
Education</b>: Bachelor&rsquo;s degree in a technical field such as Computer Science, Engineering, or equivalent; an MBA or relevant master&rsquo;s degree is a plus.</li><li><b>
Certifications</b>: ITIL certification or similar in incident management and service delivery is highly desirable.</li><li><b>
Availability</b>: Willingness to participate in 24/7 on-call rotations and lead crisis situations as they arise.</li></ul><div><b>
Preferred Qualifications:</b></div><ul><li>
Experience with AI-based incident management systems and self-service technologies.</li><li>
Proven track record of reducing incident impact through proactive monitoring, automation, and process optimization.</li><li>
Background in managing relationships with large enterprise customers, particularly in the technology, cloud, or AI sectors.</li></ul><div><br>
DDN has a very strong orientation towards these 4 characteristics and any successful employee will demonstrate these capabilities:</div><div></div><div><b><br>
Self-Starter - </b>Takes independent action to identify and solve problems. Seeks out relevant information needed to make decisions. Gets involved with new initiatives.</div><div><b>
Success/Achievement Orientation - </b>Delivers quality results consistently. Targets, achieves (or exceeds) measurable results. Sets challenging goals, focuses on critical priorities, and is accountable.</div><div><b>
Problem Solving -</b> Recognizes problems and responds with a systematic assessment that identifies and addresses cause of issue. Practical, realistic, and resourceful.</div><div><b>
Innovative -</b> Builds and improves key business processes that enhance the effectiveness of DDN. Generates new ideas, challenges the status quo, and solves problems creatively.</div><div></div><p><b><br>
DataDirect Networks, Inc. is an Equal Opportunity/Affirmative Action employer.</b> All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity, gender expression, transgender, sex stereotyping, sexual orientation, national origin, disability, protected Veteran Status, or any other characteristic protected by applicable federal, state, or local law.</p><p>
#LI-Remote</p></div>

Director, Incidents and Escalations

Copex International INC

<p><b>Job Title:</b> Senior Security Operations (SOC/CSIRT) Analyst / Team Lead</p><p><b>Location:</b> Remote (Global candidates welcome; must work U.S. business hours)<br/><b>Employment Type:</b> Full-Time</p><p><b>Salary Range:</b> $130,000 &ndash; $145,000 (depending on experience)</p><p><b>About the Role</b></p><p>We are seeking an experienced Security Operations professional with a strong background in Security Operations Centers (SOC) and Computer Security Incident Response Teams (CSIRT). This role is hands-on and involves end-to-end ownership of complex cybersecurity incidents, as well as leadership responsibilities within a security operations environment.</p><p>The ideal candidate brings deep technical expertise, strong analytical capabilities, and the ability to operate effectively within U.S.-based teams and business environments.</p><p><b>Key Responsibilities</b></p><ul><li>Lead and manage cybersecurity incident response efforts from detection through remediation</li><li>Perform advanced alert triage, investigation, and escalation within a SOC environment</li><li>Conduct detailed log analysis across Windows and Linux systems</li><li>Apply frameworks such as MITRE ATT&amp;CK and Cyber Kill Chain to analyze threats</li><li>Collaborate with cross-functional teams to improve detection and response capabilities</li><li>Provide guidance and mentorship to junior analysts and SOC team members</li><li>Develop and refine incident response playbooks and processes</li><li>Communicate clearly with stakeholders, including technical and non-technical audiences</li></ul><p><b>Required Qualifications</b></p><ul><li>Proven, hands-on experience in SOC and/or CSIRT environments</li><li>Demonstrated experience managing complex cybersecurity incidents end-to-end</li><li>Advanced knowledge of:</li><li>Identity and access management, including Active Directory (AD)</li><li>Windows event logs (evtx) and system-level analysis</li><li>Multi-factor authentication (MFA)</li><li>Network protocols and traffic analysis</li><li>Common attack vectors and threat actor methodologies</li><li>Strong experience with log analysis (Windows/Linux)</li><li>Knowledge of Digital Forensics and Incident Response (DFIR)</li><li>Experience with security tools such as Splunk, CrowdStrike, Darktrace, Forescout, and Palo Alto NGFW</li><li>Prior team leadership or management experience</li><li>Excellent communication and stakeholder management skills</li><li><b>Professional fluency in English and Spanish (written and verbal)</b></li></ul><p><b>Work Requirements</b></p><ul><li>Must be available and consistently work during U.S. business hours</li><li>Must be comfortable working within U.S.-based teams and client environments</li><li>Strong understanding of U.S. workplace communication styles and expectations</li><li>Ability to collaborate effectively in a remote, multicultural environment</li></ul><p><b>Compensation &amp; Benefits</b></p><ul><li>Base salary: $130,000 &ndash; $145,000</li><li>Health insurance reimbursement</li><li>Paid time off</li></ul><p><b>Why Join Us</b></p><p>You will play a critical role in protecting enterprise environments by leading high-impact incident response efforts. This position offers the opportunity to work on complex security challenges while contributing to the growth and maturity of security operations programs.</p><p><b>To Apply:</b> Please submit your resume along with a cover letter.</p><p>Pay: $130,000.00 - $145,000.00 per year</p><p>Benefits:</p><ul><li>Health insurance</li><li>Paid time off</li></ul><p>Application Question(s):</p><ul><li>Describe a complex cybersecurity incident you handled end-to-end. Include your role, tools used, and outcome.</li><li>Which security tools have you used hands-on in production? (e.g., Splunk, CrowdStrike, Palo Alto, etc.)</li><li>What is you expected compensation rate?</li></ul><p>Language:</p><ul><li>both English and Spanish (written and verbal) (Required)</li></ul><p>Work Location: Remote</p>

Senior Security Operations (SOC/CSIRT) Analyst

FedEx

<div><p>Lead incident response activities as needed, assisting in the prompt resolution and mitigation of security incidents.</p><br>
<p></p><ul><li>
Designs, implements, and supports SailPoint (ISC/IIQ) solutions that meet security, compliance, and business requirements.</li><li>
Delivers stable integrations with target applications, ensuring accurate identity lifecycle management (joiner, mover, leaver).</li><li>
Proactively identifies and resolves defects, performance issues, and data quality problems with minimal operational impact.</li><li>
Effectively supports access certifications, provisioning workflows, and policy enforcement, meeting audit and SOX timelines.</li><li>
Collaborates closely with security, application owners, and business stakeholders to translate requirements into technical solutions.</li><li>
Follows IAM best practices, documentation standards, and change management processes.</li><li>
Continuously improves the platform by automating manual tasks, optimizing rules/workflows, and adopting new SailPoint features.</li><li>
Demonstrates ownership, accountability, and a security-first mindset while responding quickly to incidents and escalations.</li></ul><p>
Pay Ranges:</p><p>
USA: $6,168.90/mo - $13,571.58/mo, CO: $6,168.90/mo - $13,006.09/mo, CA: $6,511.62/mo - $10,898.39/mo, NJ: $6,511.62/mo - $10,418.59/mo, OH &amp; VT: $6,511.62/mo - $10,744.16/mo, MN: $6,511.62/mo - $12,440.61/mo, IL &amp; NV: $6,511.62/mo - $13,006.09/mo, MD, NY &amp; WA: $6,511.62/mo - $13,571.58/mo, MA: $6,854.33/mo - $13,571.58/mo, RI: $7,539.76/mo - $12,440.61/mo, CT: $7,539.76/mo - $13,006.09/mo, DC &amp; HI: $7,882.48/mo - $13,006.09/mo, NYC: $7,882.48/mo - $13,571.58/mo</p><p><b>
Minimum Education</b></p><p>
Bachelor's degree in computer science, information systems and/or equivalent formal training or work experience.</p><p><b>
Minimum Experience</b></p><p>
Two (2) years of experience in IT information security.</p><p><b>
Knowledge, Skills, and Abilities</b></p><p>
General knowledge of hardware, software, and network.</p><p></p><p><b><br>
Preferred Qualifications: </b>﻿﻿ ﻿﻿</p><p><b>
Pay Transparency: </b>﻿This compensation range is provided as a reasonable estimate of the current starting salary range for this role across all potential locations. If this opportunity includes multiple job levels, the range is a reasonable estimate of the current.﻿ ﻿starting salary for the lowest level to the current starting salary of the highest level. Actual starting pay would be determined by experience relative to the job, market level, pay at the location for this job and other job-related factors.﻿ ﻿An employee may be eligible for additional pay, premiums, or bonus potential. The Company offers eligible employees health, vision, and dental insurance, retirement plans, and tuition reimbursement﻿</p><p><b>
Pay: </b>﻿US pay range: $6,168.90 - $13,571.58monthly﻿</p><p><b>
Additional Details: </b>﻿Application Criteria: Upload current copy of Resume (Microsoft Word or PDF format only) and answer job screening questionnaire by April 17, 2026﻿</p><p></p><p><b><br>
Pay Transparency:</b></p><p>
The compensation listed reflects the pay range or rate of pay reasonably expected for this posted position at the posted location or locations. If this opportunity includes multiple job levels, the pay information represents the ranges for each level in that job family. Actual pay is determined by several job-related factors permitted by law and relevant to the position, including, but not limited to, experience relative to the job, tenure, market level, pay at the location for this job, performance, schedule, and work assignment. In California, the compensation listed reflects the range or rate of pay reasonably expected for this posted position upon hire.</p><p></p><p><br>
Federal Express Corporation is an Equal Opportunity Employer including, Vets/Disability.</p><p>
Reasonable accommodations are available for qualified individuals with disabilities throughout the application process. Applicants who require reasonable accommodations in the application or hiring process should contact recruitmentsupport@fedex.com.</p><p>
Applicants have rights under Federal Employment Laws:</p><ul><li>
Know Your Rights</li><li>
Pay Transparency</li><li>
Family and Medical Leave Act (FMLA)</li><li>
Employee Polygraph Protection Act</li></ul><p>
E-Verify Program Participant: Federal Express Corporation participates in the Department of Homeland Security U.S. Citizenship and Immigration Services&rsquo; E-Verify program (For U.S. applicants and employees only). Please click below to learn more about the E-Verify program:</p><ul><li>
E-Verify Notice (bilingual)</li><li>
Right to Work Notice (English) / (Spanish)</li></ul><p></p><p><b><br>
For details on our comprehensive benefits, click </b><b>here</b><b>.</b></p></div><p></p>

Cyber Security Analyst

Resource Management Concepts, Inc.

<div><p><b>Description</b></p><p>
Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.</p><p>
RMC is hiring a <b>SOC Analyst Team Lead</b> to support our customer in Dahlgren, VA. The SOC Analyst Team Lead is responsible for leading the team in monitoring, detecting, analyzing, and responding to cybersecurity incidents within a Department of Defense (DoD) network environment. This role supports the protection of classified and unclassified systems by leveraging advanced security tools, threat intelligence, and established DoD cybersecurity frameworks.
</p><p></p><p><b>Key Responsibilities:
</b></p><ul><li>Ability to lead a team of SOC Analysts and perform in the following duties.</li><li>
Monitor Security Information and Event Management (SIEM) systems for suspicious activity and potential threats
</li><li>Analyze security alerts, logs, and network traffic to identify indicators of compromise (IOCs)
</li><li>Perform incident triage, investigation, and escalation in accordance with established procedures
</li><li>Respond to cybersecurity incidents, including containment, eradication, and recovery efforts
</li><li>Document incidents, findings, and actions in accordance with DoD reporting standards
</li><li>Correlate threat intelligence with internal events to proactively identify threats
</li><li>Conduct vulnerability assessments and assist with remediation efforts
</li><li>Support continuous monitoring requirements under RMF (Risk Management Framework)</li><li>
Maintain compliance with DoD cybersecurity policies, including STIGs and NIST guidelines
</li><li>Collaborate with internal teams, including network engineers, system administrators, and ISSOs</li></ul><br>
<b>
Requirements</b><br>
<p></p><ul><li>
5+ years of experience in a Security Operations Center (SOC) or cybersecurity role
</li></ul><ul><li>Strong understanding of networking concepts (TCP/IP, DNS, firewalls, intrusion detection systems)
</li><li>Knowledge of incident response methodologies and frameworks</li><li>
Experience with RMF (Risk Management Framework), STIGs (Security Technical Implementation Guides), NIST 800-53 security controls, DISA policies and compliance standards, advanced threat detection tools, and the MITRE ATT&amp;CK framework.</li></ul><ul><li>
Proficiency in scripting languages such as Python, PowerShell, and Bash</li><li>
Willingness to work shifts, which may include nights, weekends, and holidays</li><li>
Perform duties within secure Department of Defense (DoD) facilities or Sensitive Compartmented Information Facilities (SCIF)</li><li>
Availability to be on-call as needed</li><li>
Excellent written and verbal communication skills</li><li>
Ability to collaborate effectively within a team and coordinate incident response</li></ul><p></p><p><b>
Certification:
</b></p><ul><li>CompTIA Sec+ (Per DoD Directive 8570.01-M or successor, this position requires IAT Level 2 or higher certification).</li></ul><p></p><p><b><br>
CLEARANCE:</b></p><ul><li>
An <b>active DoD Top Secret clearance</b> is required to start.
</li><li>Ability to obtain and maintain a DoD Top Secret clearance.</li><li>
Applicant selected may be subject to a security investigation and must meet eligibility requirements for access to classified information.</li></ul><br>
<b>
Benefits</b><p><i><br>
At RMC, we're committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees.
</i></p><p><i>RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level. We offer Monday to Friday full-time day shift work, and can assist in paid relocation. This also includes a competitive paid vacation package with 11 paid federal holidays. Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package.</i></p><p><i>
Salary at RMC is determined by various factors, including but not limited to location, a candidate's specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements. The current salary range for this position will be $120,000 to $165,000 annually.</i></p></div>

Systems Integration Engineer (SOC) Analyst - Team Lead

Search 10000+ Incident response lead jobs near you this April. New roles added regularly across leading industries. Apply today.