Experience leading every phase of the incident lifecycle, including conducting rapid triage to determine severity, performing deep-dive investigations into root causes, and assessing appropriate containment, eradication, and remediation strategies to halt active threats. Ability to obtain an 8570 DoW approved CSSP baseline certification, including CEH, CFR, CCNA Cyber Ops, CCNA-Security, CySA+, GCIA, GCIH, GICSP, Cloud+, SCYBER, or PenTest+, before start date.