Cybersecurity Incident Handler, Senior

Position Overview

As a Cybersecurity Incident Handler, Senior, you will be at the forefront of our cyber defense efforts, operating within a Security Operations Center (SOC) and actively responding to and mitigating threats in real time. Tasked with securing critical infrastructure for our mission partner—Air Force networks—you will improve monitoring strategies, analyze threat intelligence, lead incident response, and guide recovery efforts. Join us and be the key force that keeps our digital operations safe.

Key Responsibilities

• Respond to and mitigate cyber threats in real time as a first line of defense.
• Improve monitoring strategies and analyze threat intelligence to restore operations quickly.
• Assess the extent of incidents by determining how many systems are affected and coordinating recovery efforts.
• Combine threat intelligence, event data, and post-event assessments to identify patterns and attacker goals.
• Advise on best practices and security measures to strengthen the organization’s cyber defense.

Required Qualifications

• 7+ years of experience in cybersecurity.
• 3+ years of experience in a SOC with incident response activities, including artifact analysis, incident report writing, and event triaging.
• Expertise in supporting information assurance, networking, or systems administration.
• Experience with cloud native technologies (AWS Guard Duty, Azure Defender for Cloud, AWS Macie).
• Knowledge of cyber threat intelligence, digital forensics, red teaming, threat hunting, cloud incident response, counterintelligence, and detection engineering.
• Familiarity with cybersecurity standards and external guidelines (ISO 22301, ISO 22317, NIST 800-53, NIST 800-61).
• Must possess a TS/SCI clearance.
• Bachelor's degree plus 3+ years experience in cyber/IA or 7+ years in lieu of a degree.
• DoD 8140 Level II Certification (Security+, CySA+, or CISSP Certification).

Preferred Qualifications

• Experience using Microsoft Office products.
• Familiarity with advanced cyber capabilities including continuous monitoring, advanced threat hunting, and secure Cloud/DevSecOps operations.
• Hands-on experience with cybersecurity tools such as Microsoft Defender for Endpoint, Corelight, Suricata/Snort, Palo Alto and Cisco firewalls, Archer Case Management, ServiceNow, Threat Connect, Splunk Enterprise Security and SOAR, Cofense, IronPort Mail Gateways, or Microsoft G5 Defender suite.
• Excellent verbal and written communication skills, time management, and analytical abilities.

Benefits & Perks

• Comprehensive health, life, and disability coverage.
• Robust financial and retirement benefits.
• Paid leave, professional development opportunities, tuition assistance, and work-life programs.
• Dependent care support and a recognition awards program for exceptional performance.

Compensation: The projected salary range for this position is $99,000.00 to $225,000.00 (annualized USD). Salary is determined by factors including location, education, experience, and organizational requirements. This range is a component of Booz Allen's total compensation package.