Incident Response Lead / Cybersecurity Operations Lead

eTelligent Group•Rockville, MD

About The Position

Over the past 15 years, eTel has delivered essential solutions for the federal government by securing and managing data, providing scalable identity access, modernizing legacy systems, and building high-performance platforms. By integrating new technologies and ensuring reliable operations we help agencies stay prepared for future challenges As a premier technology solutions and services company to the US federal government, eTel possesses longstanding relationships across the federal civilian marketplace. Other customers include the broader Treasury Department, Commerce Department, and State Department. eTel offers integrated CMMI Level 3 processes, tools, and techniques with innovative, cost-efficient, and secure solutions to address complex challenges. eTel also holds ISO 9001:2015, ISO/IEC 27001:2013, and ISO/IEC 20000-1:2018 certifications, and offers dedicated subject matter experts (SMEs) and thought leaders that possess a deep understanding of customers’ environments and challenges. The Incident Response Lead manages cybersecurity incident response activities and coordinates incident handling across NCATS systems and infrastructure. This role ensures timely identification, analysis, containment, and remediation of cybersecurity incidents while coordinating with federal incident response teams and internal stakeholders.

Requirements

Bachelor’s degree in cybersecurity, information technology, computer science, or related field.
Minimum 8 years of experience in cybersecurity operations or incident response.
Experience performing digital forensics, malware analysis, and threat investigation.
Experience supporting federal cybersecurity incident response programs.
CISSP (required)

Nice To Haves

Experience supporting federal incident response operations or Security Operations Centers.
Familiarity with threat intelligence platforms and vulnerability management tools.
Experience working with federal cybersecurity reporting requirements.
GIAC Certified Incident Handler (GCIH)
GIAC Certified Intrusion Analyst (GCIA)
Certified Ethical Hacker (CEH)
Security+

Responsibilities

Lead incident response coordination for cybersecurity and privacy incidents affecting NCATS systems.
Perform incident triage, event analysis, and threat identification activities.
Coordinate response actions with NCATS IT teams, system owners, and federal cybersecurity teams.
Investigate potential security events and determine whether incidents have occurred.
Conduct malware analysis and forensic investigations as required.
Document incident response activities and maintain incident tracking records.
Prepare incident response reports and provide recommendations for remediation.
Support vulnerability management and risk mitigation activities.
Ensure incidents are reported and handled in accordance with federal incident response policies.
Coordinate communications among stakeholders during incident response activities.
Conduct post incident analysis and identify lessons learned to improve security posture.
Develop and maintain incident response procedures and documentation.