Peraton · 14 hours ago
Incident Response Analyst SME
MacDill AFB, FL, US
Full-time
Onsite
Senior Level, Lead/Staff
$135K/yr - $216K/yr
10+ years expPeraton is a next-generation national security company that drives missions of consequence. They are seeking a highly cleared Incident Response Analyst - SME to provide technical and management leadership for cybersecurity incident response functions within the C2ISR Transport Infrastructure.
Information TechnologyRobotics
No H1B
Security Clearance RequiredU.S. Citizen Only
Responsibilities
Provides technical and management leadership for all cybersecurity incident response functions within the C2ISR Transport Infrastructure, establishing overarching goals and strategic plans for comprehensive protection and operational assurance
Directs and controls the strategic design, development, and implementation of advanced incident response methodologies, threat intelligence integration, and digital forensics capabilities across diverse technological domains
Possesses expert domain and technical knowledge in advanced persistent threats (APTs), incident lifecycle management, and C2ISR systems, applying this to define and drive the technical roadmap for developing and executing robust cybersecurity services
Has overall responsibility for establishing and implementing innovative approaches that ensure rapid and effective response to all cybersecurity incidents, addressing critical security controls (access management, network boundaries, supply chain risk mitigation)
Engages in high-level client negotiations and interfaces with senior management regarding the strategic vision, capabilities, and resource allocation for advanced incident response solutions
Utilizes expert domain knowledge and decision-making that has a critical impact on the overall project implementation, ensuring incident response strategies maintain continuous compliance with DoD IA policies and comprehensive threat prevention strategies
Directs and controls the methods and staffing for incident response teams, ensuring delivery of high-impact, scalable, and resilient security solutions that optimize C2ISR operational effectiveness
Provides authoritative guidance on all aspects of incident prevention, detection, analysis, containment, eradication, and recovery, including post-incident review and lessons learned integration
Establishes and governs the architectural principles, tools, and platforms for all incident response efforts, critically impacting the reliability, resilience, and security effectiveness of C2ISR systems
Shapes the future direction of cybersecurity for the task order by pioneering new incident response technologies, threat hunting techniques, advanced security orchestration and automation, directly impacting national security and warfighter support
Utilize the following Role Specific Tools: Security Information and Event Management (SIEM) platforms (e.g., Splunk, Microsoft Sentinel); intrusion detection and prevention systems (Snort, Suricata, Zeek); endpoint detection and response (EDR) tools (e.g., Microsoft Defender for Endpoint, Trellix, SentinelOne) threat intelligence platforms (MISP, ThreatConnect); vulnerability management dashboards (Nessus, Qualys, OpenVAS); incident ticketing and workflow systems (ServiceNow, Jira Service Desk integrated with IR playbooks); log aggregation and correlation engines; encryption and secure communications utilities (PKI, TACLANE); evidence collection and chain of custody documentation templates; automated response orchestration tools (SOAR platforms like Palo Alto Cortex XSOAR, Splunk Phantom); compliance and reporting templates for incident handling under DoD RMF, NIST SP 800 61, and ISO/IEC 27035
Qualification
Required
Previous experience as an Incident Response Analyst or similar role supporting a DoD customer at the CCMD level
Minimum of 12 years' experience with a BS/BA or 10 years' experience with an MS/MA or 7 years' experience with a PhD. or 16 years' w/o a degree or 14 years with AS/AA
A current, active DoD security clearance at the TS/SCI level
US citizenship is required
DoD 8140 role for WRC: 531; Element: CS; Work Role: Cyber Defense Incident Responder; Proficiency Level: Advanced / Ability to obtain
Preferred
DoD-approved IA baseline certification for ADP-III/IT-III based on the IAT level and CE/Operating System (OS) certificate within six months of the assignment
Benefits
Access to professional development opportunities and career growth within the intelligence and cybersecurity community
Opportunity to work with advanced tactical communications technologies and AISR systems
Company
Peraton
Peraton Fearlessly solving the toughest national security challenges.
10001+ employees
Funding
Current Stage
Late StageLeadership Team
Thomas Terjesen
Chief Information Officer
Recent News
Washington Technology
2026-01-22
2025-09-25
Company data provided by crunchbase