OTHER

FEED

UNKNOWN

Our teams deliver rapid incident response, advanced forensics, and coordinated recovery operations to protect vital systems from evolving cyber threats. Collaborate with cross-functional teams-including threat analysts, forensics personnel, SOC operators, and federal incident coordinators-to provide unified, mission-focused response.

<h2>Cyber Incident Manager</h2>Location: Washington Dc Metro Area (On-Site)Citizenship: US onlyClearance: Active TS/SCI (DHS EOD Suitability required) Company: Argo Cyber Systems, LLC - Service-Disabled Veteran-Owned Small Business (SDVOSB)<hr/><h3>About Argo Cyber Systems</h3>Argo Cyber Systems provides mission-critical cybersecurity support to U.S. Government agencies and critical infrastructure owners nationwide. Our teams deliver rapid incident response, advanced forensics, and coordinated recovery operations to protect vital systems from evolving cyber threats. We combine technical precision with operational agility-helping federal partners identify, contain, and recover from complex cyber incidents with speed and confidence.<hr/><h3>Position Overview</h3>Argo Cyber Systems is seeking a Cyber Incident Manager to lead onsite incident response operations for a U.S. Government customer. The selected candidate will coordinate and execute incident handling, forensic triage, and threat mitigation activities for large-scale, high-impact cyber events. This role is part of a 24×7 incident response capability that provides immediate investigation, containment, and recovery support to federal civilian agencies and critical infrastructure entities.<hr/><h3>Key Responsibilities</h3><ul><li>Direct and coordinate incident response activities across diverse environments-ensuring rapid containment, accurate impact assessment, and effective recovery.</li><li>Correlate and analyze incident data to identify patterns, trends, and emerging threats.</li><li>Perform triage and scoping of cyber incidents to determine severity, urgency, and operational impact.</li><li>Apply Defense-in-Depth principles and best practices to strengthen enterprise resilience.</li><li>Investigate indicators of compromise (IOCs), malware behavior, and intrusion vectors using host and network data.</li><li>Research and document resolution steps, mitigations, and workarounds for ongoing or recurring incidents.</li><li>Develop and maintain incident response procedures and playbooks aligned with NIST SP 800-61 Rev.2 and FISMA reporting requirements.</li><li>Monitor external intelligence sources and threat feeds to maintain situational awareness of current threat conditions.</li><li>Track, document, and brief incident lifecycle progress from detection through closure, ensuring accurate reporting and escalation to senior stakeholders.</li><li>Collaborate with cross-functional teams-including threat analysts, forensics personnel, SOC operators, and federal incident coordinators-to provide unified, mission-focused response.</li></ul><hr/><h3>Required Qualifications</h3><ul><li>U.S. Citizenship</li><li>Active TS/SCI clearance (must be able to obtain DHS EOD Suitability)</li><li>5+ years of directly relevant experience in cyber incident management, SOC operations, or DFIR roles</li><li>Strong understanding of incident response methodologies, frameworks, and reporting requirements under NIST SP 800-61 and FISMA</li><li>Demonstrated ability to analyze, prioritize, and document incidents within enterprise or federal environments</li><li>Solid grasp of attack lifecycle stages and common adversary tactics (reconnaissance, exploitation, privilege escalation, persistence, exfiltration, etc.)</li><li>Knowledge of system administration, OS hardening, and defensive security controls across Windows, Linux, and hybrid environments</li><li>Familiarity with CND policies, procedures, and regulatory frameworks</li><li>Understanding of threat actor typologies (e.g., opportunistic, organized criminal, nation-state) and their operational tradecraft</li><li>Excellent written and verbal communication skills for technical and executive reporting</li></ul><hr/><h3>Desired Qualifications</h3><ul><li>Proficiency with SIEM, EDR, and network forensic tools (e.g., Splunk, SentinelOne, Elastic, Wireshark)</li><li>Experience conducting or managing shift-based or 24×7 cyber operations</li><li>Advanced knowledge of malware analysis, log correlation, and network defense methodologies</li><li>Familiarity with incident ticketing and tracking systems (e.g., ServiceNow, Jira, Remedy)</li><li>Strong analytical mindset and ability to lead during high-pressure operational events</li></ul><hr/><h3>Education</h3><ul><li>Bachelor's Degree in Cybersecurity, Information Systems, Computer Science, or related discipline or</li><li>High School Diploma with 7-9 years of relevant incident management or cybersecurity experience</li></ul><hr/><h3>Preferred Certifications</h3><ul><li>GCIH, GCFA, GISP, GCED, CCFP, CISSP, or equivalent</li></ul><hr/><h3>Additional Information</h3><ul><li>Shift work position; schedule determined upon start.</li><li>ECP-1 rates apply.</li><li>Must be available for onsite support during active incidents or surge operations.</li></ul><hr/><h3>Why Join Argo</h3>As part of Argo Cyber Systems, you will serve at the forefront of national cyber defense-protecting civilian agencies and high-value assets from persistent and emerging threats. You'll join a veteran-founded, mission-driven team dedicated to operational excellence, collaboration, and innovation in the cyber domain. Job Posted by ApplicantPro

Argo Cyber Systems

Cyber Incident Manager III

Analysis Skills

Atlassian JIRA

Communication Skills

Computer Network Defense (CND)

Computer Science

Cross-Functional

Data Analysis

Disability Accommodations

FISMA - Federal Information Security Management Act

Federal Government

Forensic Science

Government

High School Diploma

Homeland Security

Incident Management

Incident Response

Information Technology & Information Systems

Internet Security

Leadership

Linux Operating System

Malware

Malware Analysis

Microsoft Windows Operating System

Network Security

Organizational Skills

Patient Assessment

Presentation/Verbal Skills

Regulations

Remedy

Security Attacks

Security Information and Event Management (SIEM)

Sensitive Compartmented Information (SCI)

ServiceNow

Small Business

Splunk

Systems Administration/Management

Top Secret Clearance

Trend Analysis

U.S. National Institute of Standards and Technology (NIST)

United States Citizen

Wireshark (Ethereal)

Writing Skills

Talent Acquisition

As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. The Senior Cyber Threat Intelligence (CTI) Analyst provides advanced technical and analytical support for the collection, analysis, and management of cyber threat intelligence.

YEAR

Responsibilities:
Job DescriptionThe Senior Cyber Threat Intelligence (CTI) Analyst provides advanced technical and analytical support for the collection, analysis, and management of cyber threat intelligence. The role identifies patterns in cyber threat data, assesses risk, and produces actionable intelligence to support operational and strategic decision-making. The analyst works across intelligence, operational, and management stakeholders to support threat monitoring, analysis, reporting, and platform administration. The role supports the full intelligence lifecycle, including collection, processing, analysis, and dissemination of cyber threat intelligence. Responsibilities may include:<ul style="margin-top:0in"><li>Monitors cyber threat intelligence from open, commercial, and classified sources using threat intelligence platforms such as OpenCTI </li><li>Analyzes adversary tactics, techniques, and procedures (TTPs) to develop and maintain a cyber threat knowledge base </li><li>Identifies patterns of behavior across cyber incidents, and documents Indicators of Compromise (IOCs) and emerging threats.</li><li>Enriches threat intelligence data to provide additional analytical context </li><li>Administers and maintains the CTI platform, ensuring data integrity, availability, and performance </li><li>Ingests, normalizes, and correlates cyber threat data from multiple sources using STIX/TAXII standards to support data fusion and analysis</li><li>Produces structured intelligence products (alerts, briefs, threat landscape reports) and communicates findings to stakeholders </li><li>Provides training and support to field offices and headquarters users </li><li>Contributes to the development and implementation of CTI best practices and standards</li></ul>

Qualifications:
Required Qualifications  LU<ul><li>High School Diploma with a minimum of 8 years of related Cyber Threat Intelligence Analysis experience</li><li>BS/BA with a minimum of 5 years of related experience</li><li>Experience operating cyber threat intelligence platforms (e.g., OpenCTI) </li><li>Experience analyzing cyber threat actor tactics, techniques, and procedures (TTPs) </li><li>Experience producing intelligence products such as threat alerts, briefs, or threat landscape reports </li><li>Experience documenting Indicators of Compromise (IOCs) and cyber threat trends </li><li>Experience working with multiple operating systems (Windows, Linux, Android) </li><li>Knowledge of application, network, and mobile device security </li><li>Ability to analyze threat intelligence reports and produce actionable intelligence </li><li>Experience communicating intelligence findings to stakeholders </li><li>Active TS/SCI security clearance with the ability to obtain a polygraph</li></ul>Desired Qualifications / Skills<ul style="margin-top:0in"><li>Experience administering or managing cyber threat intelligence platforms </li><li>Experience with STIX/TAXII data standards for structured intelligence ingestion </li><li>Experience performing data normalization, enrichment, and correlation across multiple sources </li><li>Experience integrating intelligence data across systems (data fusion) </li><li>Strong understanding of network architecture, TCP/IP, and infrastructure components (routers, switches, firewalls) </li><li>Experience analyzing intrusion activity and cyber threats across enterprise environments </li><li>Experience with scripting or automation to support data processing or analysis </li><li>Experience providing technical training or user support for intelligence platforms </li><li>Experience supporting intelligence lifecycle processes (collection, processing, analysis, dissemination) </li><li>Strong analytical skills with the ability to identify patterns, trends, and operational impacts in cyber threat data</li></ul>This critical National Security role is eligible for Peraton's premier benefits package, designed to recognize andsupport the professionals safeguarding our nation. A few highlights: <ul><li>280 hours of annual leave (5 weeks of PTO & 2 weeks of holiday)</li><li>Health Benefits (medical, dental & vision) – very low to no cost employee contributions</li><li>Annual Critical Skills Bonus</li></ul>

Peraton Overview:
Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit <a href="http://peraton.com/" rel="noopener nofollow noreferrer" target="_blank">peraton.com</a> to learn how we’re keeping people around the world safe and secure.

Target Salary Range:
$135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO:
EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.

Peraton drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted and highly differentiated national security solutions and technologies that keep people safe and secure. Peraton serves as a valued partner to essential government agencies across the intelligence, space, cyber, defense, civilian, health, and state and local markets. Every day, our employees do the can’t be done, solving the most daunting challenges facing our customers.

Actor Jobs in Washington, DC

Resume Resources

Similar Job Searches

Get noticed by top employers!

Actor Jobs in Washington, DC

Cyber Incident Manager III Argo Cyber Systems

Cyber Threat Intelligence (CTI) Analyst, Lead Associate - TS/SCI w/poly Peraton

Resume Resources

Similar Job Searches