Tyto Athene, LLC · 1 day ago
Incident Response Team Lead
Ashburn, VA
Full-time
Onsite
Senior Level
5+ years expTyto Athene is searching for a forward-thinking and self-motivated Incident Response Team Lead to support a law enforcement customer in Washington, DC. This role requires strong organizational skills and the ability to perform complex tasks quickly while leading incident response activities and mentoring junior staff.
Information Technology
No H1B
Security Clearance RequiredU.S. Citizen OnlyHiring Manager
Suzanne Murphy
Responsibilities
Utilize state-of-the-art technologies such as host forensics tools (FTK/Encase), Endpoint Detection & Response tools, log analysis (Splunk), and network forensics (full packet capture solution) to perform hunt and investigative activity to examine endpoint and network-based data
Conduct malware analysis, host and network, forensics, log analysis, and triage in support of incident response
Recognize attacker and APT activity, tactics, and techniques that can be used to improve monitoring, analysis, and incident response
Develop and build security content, scripts, tools, or methods to enhance the incident investigation processes
Lead Incident Response activities and mentor junior staff
Work with key stakeholders to implement remediation plans in response to incidents
Effectively investigative and identify root cause findings then communicate findings to stakeholders including technical staff, and leadership
Author Standard Operating Procedures (SOPs) and training documentation when needed
Generates end-of-shift reports for documentation and knowledge transfer to subsequent analysts on duty
Qualification
Required
Minimum five (5) years of progressive experience in cybersecurity, information security, security engineering, network engineering, incident response, systems architecture, or data management with a cybersecurity focus
Bachelor's degree in Computer Engineering, Computer Science, Information Technology, or Cybersecurity (or eight (8) years of relevant work experience in lieu of degree)
Required Certification: Certified Information Systems Security Professional (CISSP)
Proficient experience with: Security Information and Event Management (SIEM) systems
Proficient experience with: Endpoint Detection & Response (EDR) tools
Proficient experience with: Intrusion Detection & Prevention Systems (IDS/IPS)
Proficient experience with: Digital forensic and case management platforms
Proven experience leading cyber incident response efforts and coordinating with technical and non-technical stakeholders
TS/SCI Clearance required
Preferred
Knowledge and experience with scripting and programming (Python, PERL, etc.) are also highly preferred
Desirable certifications include, but not limited to: GCIH, GCIA, GCFE, GREM, GCFA, GSEC
Security +
CEH, CISSP, CCNA (Security) or equivalent Certifications
CySA+
Company
Tyto Athene, LLC
At Tyto Athene, we help turn Data to Dominance.
1001-5000 employees
Funding
Current Stage
Late StageLeadership Team
Dennis Kelly
Chief Executive Officer
Peter O'Donoghue
Chief Technology Officer
Recent News
Washington Technology
2025-11-23
Washington Technology
2025-11-01
Washington Technology
2025-09-16
Company data provided by crunchbase