Cybersecurity Analyst / Incident Response Coordinator

We are seeking a Cybersecurity Analyst / Incident Response Coordinator to oversee incident response, vulnerability management, and threat analysis for a federal agency’s IT security program. This role combines hands-on cyber and incident lifecycle management., Position Description: The Cybersecurity Analyst / Incident Response Coordinator provides technical support and project and incident response lifecycle oversight., * Assignment Location - Executive Office for Immigration Review, 4825 Mark Center Drive, Suite 200, Alexandria, VA 22311

• Sedentary Work - Exerting up to 10 pounds of force occasionally and/or a negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects.
• Typing, communicating, repetitive motions.
• Close visual acuity to prepare and analyze data, view computer monitors and read. May need to view presentation screens and other visual aids in a virtual setting.
• Inside environmental conditions with protection from outside elements.

Security: Ability to obtain/maintain a Federal Civilian Public Trust

• U.S. Citizenship or Permanent Resident that has lived in the United States for at least 3 years

Federal Civilian Public Trust Consists of a review of up to but not limited to:

• Covers 10 year period and in some instances lifetime events
• OPM Security Investigations Index (SII)
• DOD Defense Central Investigations Index (DCII)
• National Agency Check (NAC) records
• FBI name check
• FBI fingerprint check
• Credit report check
• Written inquiries to previous employers and references listed on the application for employment
• Potential interviews with the subject, spouse, neighbors, supervisor, coworkers
• Law enforcement check
• Court records check
• Education check- Attendance and Degrees

Tasks/activities include, but are not limited to:

• Verifies support staff are meeting contract deliverables and services
• Identifies obstacles preventing support staff from performing their responsibilities and addresses them
• Develops and provides monthly, weekly, and ad hoc status reports to leadership
• Maintains project plans tracking risks, issues, and completed/upcoming tasks
• Briefs leadership monthly and attends all cyber-related meetings
• Develops and maintains an Incident Response Plan
• Provides incident response support
• Alerts the Incident Response Team of security advisories, vulnerabilities, and new threats
• Analyzes incidents and briefs recommendations quarterly to leadership
• Records and catalogs lessons learned, maintaining a searchable repository
• Conducts investigation and analysis of cybersecurity incidents
• Develops and maintains the Vulnerability Management Plan and related Standard Operating Procedures (SOPs)
• Conducts risk and vulnerability assessments using tools such as Tenable, IBM BigFix, and Splunk
• Oversees creation and accurate documentation of Plan of Action and Milestones (POA&Ms)
• Coordinates with the cyber operations team to remediate identified vulnerabilities
• Tracks and reports vulnerability trends, providing monthly, quarterly, and annual metrics
• Integrates automated threat intelligence feeds into the Enterprise SIEM
• Analyzes threats against the environment and provides cyber situational awareness
• Oversees insider threat investigations and manages the tool in accordance with ITIL-compliant Service Level Agreements (SLAs)

Minimum/General Experience: 3 - 10 years of cyber incident response experience

Minimum Education: Bachelors’ Degree in Cybersecurity, Information Technology, or a related field

Essential Skills/Qualifications:

• Excellent experience providing oversight for the entire incident response lifecycle from initial detection to final remediation and incident closure
• Excellent experience with Security Information and Event Management (SIEM) tools
• Excellent experience with Security Orchestration, Automation, and Response (SOAR) platforms
• Above average experience providing final decisions on technical containment strategies
• Above average experience overseeing vulnerability management and scanning operations (e.g., Tenable)
• Above average experience managing daily tasking of a team
• Above average experience ensuring compliance with applicable retention policies
• Above average experience translating incident data into high-level trend analysis and status reports for leadership
• Excellent verbal and written communication skills
• Experience supporting a federal agency (preferred)

Compensation & Benefits: The annual projected pay range for this position is $101,526 - $132,689 with consideration being given to various factors including but not limited to qualifications, experience, job responsibilities, and geographic location.

Oxley Enterprises, Inc. offers a full array of benefits including:

• Medical, dental, vision and prescription drug coverage for you and your family.
• Life Insurance, short-term disability and long-term disability paid for by the Company.
• Supplemental coverages including Accident, Critical Illness, and Hospital.
• Additional Life insurance coverage for you and your dependents.
• 401k plan with various options to select based on your retirement goals.

Oxley Enterprises , Inc. is a certified service-disabled veteran-owned (SDVOSB), veteran-owned (VOSB), and woman-owned small business (WOSB) that has 26 years of experience building and delivering quality IT systems and programs. Oxley is ranked in the INC 5000 7 times (2016, 2017, 2018, 2021, 2023, 2024, 2025). Oxley is a 2019 - 2025 Department of Labor HIRE Vets Medallion Award Winner. Oxley is Virginia Values Veterans certified.