Cyber Defense Incident Responder

ASRC Federal Holding Company • Quantico, VA • 8h ago

ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are a top veteran employer and Certified Great Place to Work

ASRC Federal is seeking a highly skilled and experienced Cyber Incident Responder to join our dynamic team on the swing shift (1400 - 0000) , providing extended-hours coverage that includes weekend and holiday rotations . This is a fully on-site position at Quantico Marine Corps Base, VA - no telework is available for this role.

The successful candidate will serve as a front-line defender, rapidly detecting, triaging, containing, and eradicating cyber threats across our enterprise infrastructure. This role is critical for minimizing the impact of security incidents, coordinating response actions, and preserving forensic evidence in support of Department of Defense (DoD) missions.

Position Description:

The Cyber Incident Responder is a vital role responsible for executing the full incident response lifecycle during swing-shift, weekend, and holiday coverage windows . This position focuses on detecting and responding to security incidents in real time, performing containment and eradication actions, and coordinating recovery efforts using enterprise tools such as SIEM, SOAR, CrowdStrike, CyberArk, and Endpoint Security Suite (ESS).

The Incident Responder will collaborate with cross-functional IT and security teams to:

Execute incident response procedures in accordance with NIST SP 800-61 and DoD guidelines

Coordinate with JFHQ-DODIN on cyber incident reporting and remediation

Support insider threat response and investigations

Contain and remediate compromised systems, accounts, and endpoints

Preserve and document forensic evidence for incident case management

Maintain incident response playbooks and ensure high operational readiness during all covered hours

Minimum Requirements:

At least Two (2) years of hands-on technical cybersecurity experience and knowledge of incident response concepts, Computer Network Defense, DISA Security Technical Implementation Guides (STIGs), DoD A&A Process, NIST SP 800-53, NIST SP 800-61, CJCSM 6510.01B, United States Cyber Command guidelines, and other applicable DoD Cyber Security and Computer Network Defense policies.

Active Top Secret Clearance REQUIRED , eligible to be upgraded to TS/SCI.

Bachelor's degree in Information Technology, Information Systems Management, Cyber Security, or equivalent experience.

Must meet DoD 8570 certification requirements at time of hire - IAT Level II (e.g., CCNA Security, CySA+, GICSP, GSEC, Security+, SSCP); CSIH, GCIH, or GCFA preferred for incident handling.

Willingness and availability to work the swing shift (1400 - 0000), including weekend and holiday rotations, fully on-site at Quantico, VA.

Required Skills:

Incident Detection & Triage: Monitor security alerts and events from SIEM, EDR, IDS/IPS, firewall, DNS, and ESS sources to rapidly detect, triage, and prioritize potential security incidents.

Incident Response Lifecycle: Execute the full incident response lifecycle - preparation, detection and analysis, containment, eradication, recovery, and post-incident activity - in accordance with NIST SP 800-61.

Containment & Eradication: Take decisive containment and eradication actions on compromised endpoints, accounts, and systems to limit incident impact.

Cyber Task Management: Process and handle JFHQ-DODIN cyber-related tasks, orders, and incident reporting requirements to completion within required timelines.

Investigation & Forensics: Identify evidence of illegal activity involving cybercrime offenses; examine computers potentially involved in crime or malware infection and preserve forensic evidence following chain-of-custody procedures.

Malware Analysis: Use forensic tools and investigative methods to identify, isolate, and analyze specific electronic data associated with complex malware infections.

Incident Documentation: Develop and maintain incident response playbooks, standard operating procedures (SOPs), and detailed incident case documentation.

Reporting & Escalation: Provide timely incident reports and escalations to senior leadership and deliver daily/weekly/monthly summaries on incident trends and key indicators of network security.

Work Environment and Physical Demands:

This is a fully on-site position at DCSA facilities, Quantico Marine Corps Base, VA. Telework is not offered for this shift.

Must work the assigned swing shift (1400 - 0000) and support weekend and holiday coverage as scheduled consisting of Four 10-hour shifts per work week.

Must be able to communicate complex technical ideas to a diverse customer base, both verbally and in written form.

We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.

EEO Statement

ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.

Job Details

Job Family Information Technology

Job Function Cyber Security

Pay Type Salary

Education Level Bachelor's Degree

Similar Jobs

NCIS Systems Administrator | Active Top Secret clearance

General Dynamics Information Technology • Quantico, VA • 4h ago

IT & Engineering

Req ID: RQ224384 Type of Requisition: Regular Clearance Level Must Be Able to Obtain: Top Secret/SCI Public Trust/Other Required: None Job Family: IT Infrastructure and Operations Skills: Microsoft (MS) Active Directory...

4h ago

Go to Apply

Linux Systems Engineer

General Dynamics Information Technology • Springfield, VA • 4h ago

IT & Engineering

Req ID: RQ224527 Type of Requisition: Regular Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph Public Trust/Other Required: None Job Family: IT Infrastructure and Operations Skills: Linux System Adminis...

4h ago

Go to Apply

BMC Remedy/Helix Developer | Active Secret clearance

General Dynamics Information Technology • Fairfax, VA • 4h ago

IT & Engineering

Req ID: RQ224458 Type of Requisition: Regular Clearance Level Must Be Able to Obtain: Secret Public Trust/Other Required: None Job Family: Software Engineering Skills: BMC Helix,BMC Remedy,BMC Remedy IT Service Managemen...

4h ago

Go to Apply

DevOps Engineer (NTO Test Support)

General Dynamics Information Technology • Springfield, VA • 4h ago

IT & Engineering

Req ID: RQ224521 Type of Requisition: Regular Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph Public Trust/Other Required: None Job Family: Professional Engineering Skills: Agile Methodology,Test Case...

4h ago

Go to Apply

PostgreSQL Database Architect

General Dynamics Information Technology • Springfield, VA • 4h ago

IT & Engineering

Req ID: RQ224524 Type of Requisition: Regular Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph Public Trust/Other Required: None Job Family: IT Infrastructure and Operations Skills: MySQL,Oracle Databas...

4h ago

Go to Apply

Senior VDI Engineer

General Dynamics Information Technology • Springfield, VA • 4h ago

IT & Engineering

Req ID: RQ224517 Type of Requisition: Regular Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph Public Trust/Other Required: None Job Family: IT Infrastructure and Operations Skills: Citrix,Virtual Deskt...

4h ago

Go to Apply

Linux Systems Engineer

General Dynamics Information Technology • Springfield, VA • 4h ago

IT & Engineering

Req ID: RQ224525 Type of Requisition: Regular Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph Public Trust/Other Required: None Job Family: IT Infrastructure and Operations Skills: Linux System Adminis...

4h ago

Go to Apply

Cybersecurity Engineer

General Dynamics Information Technology • Springfield, VA • 4h ago

IT & Engineering

Req ID: RQ224518 Type of Requisition: Regular Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph Public Trust/Other Required: None Job Family: Cyber and IT Risk Management Skills: Plan of Action and Miles...

4h ago

Go to Apply

Cyber Security Analyst | Active Secret clearance

General Dynamics Information Technology • Fairfax, VA • 4h ago

IT & Engineering

Req ID: RQ221458 Type of Requisition: Regular Clearance Level Must Be Able to Obtain: Secret Public Trust/Other Required: None Job Family: Cyber and IT Risk Management Skills: Cybersecurity Analytics,Information Assuranc...

4h ago

Go to Apply

Cameo Model-Based Systems Engineer (MBSE)

UIC Government Services and the Bowhead Family of Companies • Dahlgren, VA • 8h ago

IT & Engineering

Overview Cameo Model-Based Systems Engineer (MBSE) (DETO-2026-25748): Bowhead seeks new team members in their support to the Navy High Energy Laser Weapon System (HEL-LWS) program by refining, updating, and managing a co...

8h ago

Go to Apply

Subscribe to get new jobs sent directly to you
(no charge, cancel anytime)