Cybersecurity Incident and Application Lead at Unissant in Bethesda, MD, USA

Job description

• We are seeking a Cybersecurity Incident and Application Lead to join our team and support our client. The ideal candidate is a strong incident response and application security professional who remains calm under pressure and brings deep technical knowledge across network security, web application security, cloud technologies, and threat detection. This individual is motivated by protecting enterprise systems, improving response readiness, and working collaboratively to resolve high-priority cybersecurity events.

Responsibilities

• Lead the full lifecycle of incident detection, analysis, containment, recovery, and post-incident activities across enterprise systems.
• Coordinate incident response efforts, manage escalations, and support cross-functional response activities.
• Monitor, detect, and report suspected cybersecurity incidents using enterprise logging, SIEM, EDR, IAM, antivirus, and cloud tools.
• Configure alerts and reporting to help identify indicators of compromise, suspicious behavior, and insecure configurations.
• Track incidents through remediation and support the development of lessons learned, SOPs, and process improvements.
• Assist with incident response testing, reporting, and stakeholder communications.

Requirements

• Minimum of 5–7 years of hands-on experience in network security, web application security, and cloud technologies.
• Strong knowledge of ports, protocols, weak configurations, vulnerable services, and common intrusion techniques.
• Experience applying incident response processes across preparation, detection and analysis, containment, recovery, and post-incident review.
• Hands-on experience with technologies such as Splunk, Tenable, FireEye, IDS/IPS platforms, and related event analysis tools.
• Good understanding of Windows and Linux operating systems.
• Ability to create management reports, escalation documentation, and incident response process materials.
• Bachelor's Degree is required. Preferred field of study in Computer Science, Information Technology, Information Systems, Operations Management, or related field of study.
• MBA/Master's Degree in a relevant field of study preferred.
• Excellent verbal and written skills, ability to present proposals and performance data, comfortable interfacing all levels of organization.
• Ability to write clear and concise creative content in a highly confidential manner.
• Ability to obtain and maintain a Public Trust clearance.
• Desired certifications include ECIH, OSCP, GCIH, and Splunk certifications.

Skills

Required

• Network security
• Web application security
• Cloud technologies
• Incident response
• SIEM
• EDR
• IAM
• Antivirus
• Splunk
• Tenable
• FireEye
• IDS/IPS

Preferred

• ECIH
• OSCP
• GCIH
• Splunk certifications