> Markdown version of [/jobs/ext/2416336-cyber-security-incident-response-lead](https://www.wearedevelopers.com/jobs/ext/2416336-cyber-security-incident-response-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Security Incident Response Lead - **Company:** QED National - **Location:** Taylor, TX, United States (Remote available) - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Systems Engineering, Network Analysis, Cloud Computing, CompTIA Security+, Cyber Security, Computer Forensics, Digital Forensics, IT Management, Internet Security, Log Analysis, RSA (Cryptosystem), Security Information and Event Management, Data Logging, Cloud Platform System, Mitre Att&ck, HybridCloud, Cybercrime, Data Analytics, Splunk, Commvault - **Published:** August 26, 2026 - **Apply:** https://www.careerbuilder.com/job-details/incident-response-lead-dulles-va--15f7fd83-6774-4816-8b1f-5c2cd5cf3fa1 ## About the Role * 10+ years of hands-on cybersecurity experience, including 6+ years in incident response or digital forensics and incident response (DFIR) roles * Demonstrated leadership in managing large-scale incidents affecting cloud environments (AWS preferred) * Deep expertise in digital forensics, log analysis, SIEM tools (e.g., Splunk), EDR platforms (e.g., Trellix), and network analytics * Strong understanding of frameworks such as MITRE ATT&CK, NIST SP 800-61, and the cyber kill chain * Excellent communication skills, with the ability to brief senior leadership under pressure * U.S. Citizenship and ability to obtain Public Trust 6C clearance Desired Skills & Certifications: * Relevant cybersecurity certifications such as GCIA, GCFA, GCFE, GCIH, GFN, or similar vendor-specific IR/forensic credentials * Experience mentoring SOC responders and maturing incident response programs * Knowledge of threat intelligence, threat hunting, and enterprise logging in cloud environments, Amazon Web Services (AWS), Cloud Computing, Communication Skills, Computer Forensics, Computer Security, Consulting, Cross-Functional, Federal Government, Fortune 500 Customers, GCFA - GIAC Certified Forensic Analyst, GCIA - GIAC Certified Intrusion Analyst, GCIH - GIAC Certified Incident Handler, Government Organizations, Hunting, Hybrid Cloud, IR (Infrared), Incident Response, Internet Security, Leadership, Mentoring, Network Performance/Analysis, Security Information and Event Management (SIEM), Splunk, U.S. National Institute of Standards and Technology (NIST), United States Citizen ## Description We are seeking a highly skilled and experienced Cyber Security Incident Response Lead to serve as the technical authority during cybersecurity incidents across hybrid cloud and on-prem environments. This role involves leading incident response efforts, coordinating with cross-functional teams, and driving rapid threat containment and eradication. Ideal candidates are strategic thinkers with proven leadership in high-stakes cybersecurity investigations, strong communication skills, and a passion for maturing SOC capabilities. Join a dynamic team dedicated to safeguarding critical infrastructure and supporting federal agencies., * Assessments and consulting * Advanced security technologies and implementation support services IT Management Consulting * Data Analytics * Project & Program Management * Enterprise Architecture and Systems Engineering * Governance, Risk & Compliance * IT Strategy IT Staff Augmentation * Providing highly qualified, reliable consultants at cost-effective rates, backed by our reputation for integrity & professionalism Technology Solutions * A comprehensive portfolio of products and services including, but not limited to RSA, Checkpoint, Information Builders, Commvault, EMC and Schneider Electric/APC QED National is led by a strong management team, under the direction of founder and president, Colleen Molter. Working with selected organizations, chosen for their outstanding products and support services, QED National delivers expert solutions ranging from IT assessments and governance to intelligent data storage and staff augmentation. It all adds up to comprehensive, customized IT business solutions. Esteemed Clients and Sustained Growth ## Related Videos - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Applying Agile Principles to Incident Management ](https://www.wearedevelopers.com/videos/101-applying-agile-principles-to-incident-management) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)