Job Description
Role overview We are seeking a Cyber Incident Response Specialist to investigate and respond to cybersecurity incidents. This hands-on role will work with security and IT teams to contain threats, support recovery, and improve incident response readiness. Responsibilities
- Investigate security alerts and suspected compromises across networks, endpoints, and systems.
- Analyze logs, network traffic, and endpoint evidence to determine incident scope and impact.
- Coordinate containment, eradication, and recovery activities.
- Preserve evidence and document investigation findings, timelines, and remediation actions.
- Communicate incident status and recommendations to technical teams and stakeholders.
- Help maintain response playbooks and conduct post-incident reviews. Required qualifications
- Active Top Secret security clearance.
- Hands-on experience in cybersecurity incident response or security operations.
- Experience with SIEM, endpoint detection and response, and network analysis tools.
- Working knowledge of Windows, Linux, networking, and common attacker techniques.
- Strong troubleshooting, documentation, and communication skills.
- Ability to work onsite in the Boston, MA area for the 6-month engagement. Preferred qualifications
- Digital forensics or malware analysis experience.
- Familiarity with NIST incident response guidance and MITRE ATT&CK.
- Relevant certifications such as GCIH, GCFA, or comparable credentials.