Incident Commander (Tier 3)

This

position

is

listed

on

behalf

of

a

partner

company,

who

manages

all

applications

and

next

steps.

Our

partner

is

looking

for

an

Incident

Commander

(Tier

3)

based

in

the

United

States

.

This

is

an

excellent

opportunity

for

an

experienced

cybersecurity

professional

to

lead

complex

security

incident

response

operations

in

a

fully

remote

environment.

As

a

Tier

3

Incident

Commander,

you

will

oversee

critical

cybersecurity

investigations

and

coordinate

response

efforts

across

technical

teams

and

key

stakeholders.

You

will

play

a

central

role

in

identifying

sophisticated

threats,

assessing

their

impact,

and

driving

effective

containment,

remediation,

and

recovery

strategies.

Working

within

a

24/7/365

incident

response

environment,

you

will

manage

escalations

and

ensure

timely,

accurate

communication

with

technical

teams

and

federal

leadership.

The

position

combines

advanced

technical

expertise,

operational

leadership,

and

strategic

decision-making

to

strengthen

security

and

resilience.

You

will

also

contribute

to

continuous

improvement

by

identifying

vulnerabilities,

refining

response

procedures,

and

supporting

effective

threat

mitigation.

Accountabilities

Advanced

Incident

Response:

Lead

Tier

3

investigations

into

complex

cybersecurity

incidents,

including

malware

infections,

phishing

campaigns,

ransomware

attacks,

social

engineering,

data

exposure,

and

other

security

threats.

Analyze

attack

vectors,

adversary

behavior,

and

indicators

of

compromise

to

determine

incident

severity,

scope,

and

potential

impact.

Incident

Command

&

Coordination:

Serve

as

the

primary

operational

coordinator

during

significant

security

incidents,

assigning

response

actions

and

coordinating

enterprise

teams,

incident

responders,

stakeholders,

resources,

and

timelines

to

ensure

effective

resolution.

Security

Monitoring

&

Threat

Analysis:

Review

escalated

security

alerts

and

analyze

events

using

Splunk

SIEM

and

other

security

platforms.

Perform

advanced

incident

triage,

distinguish

genuine

threats

from

false

positives,

and

determine

appropriate

containment,

investigation,

or

escalation

measures.

Containment

&

Recovery:

Coordinate

incident

containment,

remediation,

and

recovery

activities

to

minimize

operational

disruption,

mitigate

risks,

and

restore

affected

systems

and

services.

Incident

Documentation

&

Reporting

Create,

maintain,

and

track

incident

records

throughout

the

investigation

lifecycle,

ensuring

accurate

documentation

and

compliance

with

applicable

federal

requirements,

organizational

policies,

and

reporting

procedures.

Forensic

Investigation

&

Threat

Hunting:

Collaborate

with

digital

forensic

investigators

and

application

security

specialists

to

conduct

endpoint,

network,

and

log

analysis,

identify

indicators

of

compromise,

establish

incident

scope,

and

support

root-cause

investigations.

Security

Improvement

&

Risk

Management:

Evaluate

and

recommend

technical,

procedural,

and

physical

security

controls

to

address

vulnerabilities,

reduce

incident

impact,

and

prevent

recurrence.

Stakeholder

Communication:

Prepare

incident

notifications,

executive

briefings,

status

updates,

and

post-incident

reports

covering

investigation

findings,

response

actions,

remediation

progress,

recovery

activities,

and

lessons

learned.

Operational

Compliance:

Ensure

adherence

to

established

standard

operating

procedures,

escalation

protocols,

security

policies,

and

applicable

regulatory

requirements,

including

timely

incident

notifications

to

federal

leadership.

Requirements

Professional

Experience:

At

least

7

years

of

relevant

professional

experience,

or

a

bachelor's

degree

combined

with

at

least

3

years

of

relevant

experience.

Citizenship

&

Security

Eligibility

U.S.

citizenship

is

mandatory

due

to

federal

contract

requirements.

Candidates

must

be

able

to

successfully

complete

a

federal

background

investigation

for

a

High-Risk

Public

Trust

position,

including

applicable

credit

checks,

and

obtain

and

maintain

the

required

Public

Trust.

How Jobgether works

• We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
• We appreciate your interest and wish you the best!
• Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1