> Markdown version of [/jobs/ext/4626480-cyber-incident-response-specialist-top-secret](https://www.wearedevelopers.com/jobs/ext/4626480-cyber-incident-response-specialist-top-secret). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber Incident Response Specialist (Top Secret)

- **Company:** System One
- **Location:** Bedford, MA, United States
- **Contract:** Permanent contract
- **Skills:** Network Analysis, Cyber Security, Computer Networks, Linux, Digital Forensics, Log Analysis, Security Information and Event Management, Mitre Att&ck, Malware
- **Published:** November 7, 2026
- **Apply:** https://dejobs.org/x/x/3AB0D2F94D9D4FF5B11859C251D70CDC/job/

## About the Role

* Active Top Secret security clearance.

 * Hands-on experience in cybersecurity incident response or security operations.

 * Experience with SIEM, endpoint detection and response, and network analysis tools.

 * Working knowledge of Windows, Linux, networking, and common attacker techniques.

 * Strong troubleshooting, documentation, and communication skills.

 * Ability to work onsite in the Boston, MA area for the 6-month engagement.

 * Preferred qualifications

 * Digital forensics or malware analysis experience.

 * Familiarity with NIST incident response guidance and MITRE ATT&CK.

 * Relevant certifications such as GCIH, GCFA, or comparable credentials.

## Description

We are seeking a Cyber Incident Response Specialist to investigate and respond to cybersecurity incidents. This hands-on role will work with security and IT teams to contain threats, support recovery, and improve incident response readiness.

Responsibilities:

 * Investigate security alerts and suspected compromises across networks, endpoints, and systems.

 * Analyze logs, network traffic, and endpoint evidence to determine incident scope and impact.

 * Coordinate containment, eradication, and recovery activities.

 * Preserve evidence and document investigation findings, timelines, and remediation actions.

 * Communicate incident status and recommendations to technical teams and stakeholders.

 * Help maintain response playbooks and conduct post-incident reviews.