Senior Cybersecurity Incident Response Engineer

Interactive Process Technology • Radford, VA

2d • Onsite

About The Position

At IPT Associates (IPTA), the Senior Cybersecurity Incident Response Engineer will manage enterprise security information and event management (SIEM) systems, including deployment, installation, infrastructure management, and event monitoring under applicable DoD log data policies. The role supports security monitoring, incident response, audits, and compliance with security standards. The position is located in Radford, Virginia.

IPTA describes its culture as collaborative, supportive, and focused on learning, growth, initiative, integrity, and service. The company is seeking people who are curious about technology, enjoy solving problems, take initiative, work well with teams, and want to continue learning and growing.

Requirements

• Cybersecurity certification such as CISSP, ISSEP, Security+, CEH, or equivalent.
• Active Security Clearance required.
• 10 or more years of experience in cybersecurity and incident response or related areas.
• Extensive experience managing SIEM systems, including ensuring the right data is ingested into the SIEM.
• Skill in building and managing SIEM dashboards that display security events.
• Strong ability to monitor and investigate security events and anomalies.
• Experience defining reporting requirements for audits and security controls.
• Knowledge of PKI and SSL/TLS certificate management.
• Familiarity with DoD web application security standards and best practices.
• Ability to review and respond to cyber tasking orders.
• Experience working with cybersecurity service providers on audit logs and incident response.
• Experience with software assurance reviews to validate application audit logs.
• Ability to review information system design plans for security compliance.

Nice To Haves

• Bachelor's degree in computer science or equivalent experience.
• Familiarity with DoD enterprise monitoring tools and practices.
• Strong analytical, problem-solving, communication, and coordination skills.
• Incident response experience.
• Knowledge of engineering change proposals and configuration management.
• Understanding of continuity of operations (COOP) and communication plans.
• Ability to work well on a team and with many stakeholders.

Responsibilities

• Build SIEM dashboards that clearly display security events to identify anomalies and threats in near real time.
• Monitor SIEM dashboards, investigate events, and escalate when needed.
• Define reporting requirements that support audits and security controls.
• Provide PKI support, including managing SSL/TLS certificates.
• Track DoD web application security standards and newly disclosed vulnerabilities.
• Review cyber tasking orders, determine whether and how they apply, and coordinate required changes.
• Work with cybersecurity service providers on audit logging and incident response.
• Participate in software assurance reviews and evaluate system designs for security compliance.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed