> Markdown version of [/jobs/ext/3596330-tier-2-incident-responder](https://www.wearedevelopers.com/jobs/ext/3596330-tier-2-incident-responder). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Tier 2 Incident Responder

- **Company:** Athletes Global
- **Location:** Fort Meade, MD, United States
- **Experience:** Experienced
- **Salary:** $239,200.0 - $305,760.0
- **Contract:** Permanent contract
- **Skills:** Bash Shell, Cyber Security, Digital Forensics, Python (Programming Language), Packet Analyzer, Windows PowerShell, Scripting, Malware, Information Technology, Plan of Action and Milestones
- **Published:** October 6, 2026
- **Apply:** https://www.thejobnetwork.com/job/1dfbe1f6-994a-42d3-aad9-340c9e841432/incident-responder-tier-

## About the Role

Required Education and Experience: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field preferred, or equivalent experience; three to five years of hands-on incident response, digital forensics, or security operations experience.

Required Certifications: DoD 8570/8140 IAT Level III or CSSP Incident Responder certification (e.g., GCIH, GCFA, or CySA+) required; working knowledge of endpoint detection and response (EDR) tooling, packet analysis, and at least one scripting language (e.g., Python, PowerShell, or Bash) preferred., * Do you have a Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field or equivalent experience?

 * So you have three to five years of hands-on incident response, digital forensics, or security operations experience?
 * DoD 8570/8140 IAT Level III or CSSP Incident Responder certification (e.g., GCIH, GCFA, or CySA+)?
 * Do you have working knowledge of endpoint detection and response (EDR) tooling, packet analysis, and at least one scripting language (e.g., Python, PowerShell, or Bash)?

## Description

We partner with the US national defense community to create fully integrated, resilient, and innovative digital solutions that enable them to make smart decisions in real-time. We work with our customers on everything from conquering their data to improving and safeguarding IT infrastructure. Our ultimate goal? To enhance our nation's ability to identify, address, and act - no matter what challenges arise., Position Summary: The Tier 2 Incident Responder performs in-depth investigation, containment, and remediation of security incidents escalated from Tier 1, applying the NIST SP 800-61 incident response life cycle and mentors Tier 1 analysts on investigative technique., Duties and Responsibilities: Duties include the following.

 - Investigate escalated alerts and incidents through log analysis, malware analysis, and digital forensics, determining scope, root cause, and impact.

 - Support execution of containment and eradication actions. Support recovery of affected systems to a known-good, hardened baseline.

 - Document incident timelines and findings, create and track POA&M entries to closure and contribute to after-action reviews that feed back into detection content and playbooks.

 - Review and remediate findings.

 - Provide technical mentorship to Tier 1 Analysts and serve as a secondary escalation point during major incidents or surge conditions.