Incident Manager Jobs

About The Position

Requirements

• Bachelor’s degree in a technical discipline from an accredited college or university in Computer Science, Cybersecurity, Computer Engineering, or a related discipline; alternatively, a high school diploma and 4+ years of directly relevant technical experience.
• 2–4 years of progressive experience in threat intelligence, SOC operations, or cyber incident response.
• Ability to work collaboratively across physical locations.
• Active TS/SCI clearance.
• Ability to obtain Department of Homeland Security (DHS) Entry on Duty (EOD) Suitability.

Nice To Haves

• Prior experience in federal government cybersecurity roles, such as CISA, FBI, NSA, or DoD.
• Understanding of the CISA NCISS National Cyber Incident Scoring System to prioritize and triage incidents.
• Knowledge of general attack stages, such as footprinting and scanning, enumeration, gaining access, privilege escalation, maintaining access, network exploitation, and covering tracks.
• Demonstrated experience recognizing and categorizing types of vulnerabilities and associated attacks.
• Knowledge of Computer Network Defense policies, procedures, and regulations.
• Knowledge of different operational threat environments, including first-generation (script kiddies), second-generation (non-state-sponsored), and third-generation (nation-state-sponsored) threats.
• Knowledge of system and application security threats and vulnerabilities, including buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return-oriented attacks, and malicious code.
• Experience with SIEM platforms, threat intelligence platforms (TIP), and ticketing systems.
• Knowledge of critical infrastructure sectors and associated cyber risks.
• Familiarity with DHS/CISA products and services.
• Security+, CySA+, GCIH, GCIA, or similar certifications.

Responsibilities

• Perform initial triage and assessment of incoming cyber threat tickets, incident reports, and IOC submissions.
• Analyze technical data, including IP addresses, domain names, file hashes, network traffic patterns, and malware artifacts.
• Determine threat severity, credibility, and potential impact to critical infrastructure sectors.
• Enrich IOCs using threat intelligence platforms, open-source intelligence (OSINT), and government-exclusive resources.
• Prepare concise triage reports with actionable recommendations for escalation or further analysis.
• Route tickets to appropriate JCDC teams, CISA divisions, or interagency partners based on assessment findings.
• Coordinate with sector-specific analysts and interagency liaisons to gather additional context.
• Maintain accurate documentation in ticketing systems and knowledge management platforms.
• Participate in shift handoffs and contribute to daily operational briefings.
• Support development of triage playbooks and standard operating procedures.
• Monitor emerging threat campaigns and trending adversary activity.
• Provide feedback to submitters and partner organizations on ticket status and outcomes.

Benefits

• Referral bonus of $3,500 for a qualifying referred candidate who is successfully placed; the referrer may receive the bonus for any applicant placed within 12 months of referral, paid after the referred employee reaches six months of employment.