Incident Responder — Herndon, VA at Peraton

About Peraton

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world's leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. We operate at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. Our employees serve as valued partners to essential government agencies and support every branch of the U.S. armed forces, solving the most daunting challenges our customers face every day.

About the Role

We are seeking a highly skilled and innovative Incident Responder to join our team in the greater DMV area, specifically supporting the Army National Guard. In this role, you will be the frontline defender against complex security threats, working at the intersection of technology and national security. Your day-to-day involves triaging alerts and analyzing telemetry from SIEM, EDR, and network sources to identify indicators of compromise. You will execute containment actions per established playbooks, collect forensic artifacts, and perform root-cause analysis to validate detections and track remediation progress.

Beyond technical execution, you will coordinate response activities with SOC analysts, CIRT teams, and cybersecurity engineers. You will be responsible for maintaining detailed incident timelines, producing technical updates, and supporting after-action reviews. This role offers the opportunity to identify recurring patterns and visibility gaps, recommending improvements to monitoring and detection coverage while contributing to the refinement of evidence-collection procedures and the adoption of new response techniques.

Hiring Process

The application period for this role is estimated to be 30 days from the posting date, though this timeline may be adjusted based on business needs and candidate availability. By applying, you express interest in the role and the company. During the review process, selected candidates may be required to participate in an on-camera interview and a process to verify their identity.

Equal Opportunity

Peraton is an equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.

Work location

Work model: On-site

904, McDaniel Court, Herndon, Fairfax County, Virginia, 20170, United States

Herndon, Virginia

Key Responsibilities

check_circleTriage alerts and analyze SIEM, EDR, network telemetry, and application logs to identify security incidents
check_circleCollect, preserve, and document forensic artifacts and system logs for escalation and deeper analysis
check_circleCoordinate response activities with SOC analysts, CIRT teams, and cybersecurity stakeholders
check_circleValidate remediation steps and retest affected systems to confirm threat eradication prior to closure
check_circleMaintain incident timelines and produce technical updates and incident summaries for after-action reviews
check_circleIdentify recurring patterns and detection shortfalls to recommend improvements to monitoring coverage
check_circleContribute to playbook refinement and the adoption of new response techniques and tooling
check_circleInvestigate incidents by performing root-cause analysis and tracking remediation progress through case records

Requirements

verified2 years with BS/BA; 0 years with MS/MA; 6 years with no degree
verifiedActive TS/SCI clearance
verifiedBachelor's degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering OR Relevant DoD/military training OR Relevant professional certification (CEH(P), ECIH, GRID, RCCE Level 1, CBROPS, CCSP, CEH, Cloud+, FITSP-O, GCED, GCIH, GSEC, PenTest+, Security+)
verifiedIncident response, SOC analyst, or cybersecurity operations experience
verifiedHands-on experience with EDR, SIEM, packet/network analysis, log forensics, and incident case management workflows
verifiedFamiliarity with RMF/ATO evidence practices, chain-of-custody, and documentation for audits

Nice to Have

Prior DoD/ARNG or classified-environment incident response experience. Experience with SOAR playbooks, forensic tools (memory/disk analysis), and scripting for automation (Python, PowerShell). Familiarity with threat-hunting methodologies, MITRE ATT&CK mapping, and integration with detection engineering workflows.

Benefits & Perks

check_circleMedical, dental, and vision insurancecheck_circleLife insurancecheck_circleHealth savings accountcheck_circleParental leave401(k) retirement plan

Skills, education and keywords

Skills: Incident Response, Soc Analyst, Cybersecurity Operations, Edr, Siem, Packet Analysis, Network Analysis, Log Forensics, Incident Case Management, RMF.

Education: Bachelor's degree in specified fields OR equivalent experience/training.

Frequently asked questions about Incident Responder, Journeyman with Security Clearance at Peraton

What does a Incident Responder, Journeyman with Security Clearance at Peraton do?expand_more

Day-to-day, the Incident Responder, Journeyman with Security Clearance at Peraton will triage alerts and analyze siem, edr, network telemetry, and application logs to identify security incidents; collect, preserve, and document forensic artifacts and system logs for escalation and deeper analysis; coordinate response activities with soc analysts, cirt teams, and cybersecurity stakeholders; and validate remediation steps and retest affected systems to confirm threat eradication prior to closure.

What are the requirements for this Incident Responder, Journeyman with Security Clearance role?expand_more

Peraton is looking for candidates who meet the following requirements: 2 years with BS/BA; 0 years with MS/MA; 6 years with no degree; Active TS/SCI clearance; Bachelor's degree in Computer Science, Cybersecurity, Data Science, Information Systems, Information Technology, or Software Engineering OR Relevant DoD/military training OR Relevant professional certification (CEH(P), ECIH, GRID, RCCE Level 1, CBROPS, CCSP, CEH, Cloud+, FITSP-O, GCED, GCIH, GSEC, PenTest+, Security+); Incident response, SOC analyst, or cybersecurity operations experience; Hands-on experience with EDR, SIEM, packet/network analysis, log forensics, and incident case management workflows; and Familiarity with RMF/ATO evidence practices, chain-of-custody, and documentation for audits.

Where is the Incident Responder, Journeyman with Security Clearance role at Peraton located?expand_more

Incident Responder, Journeyman with Security Clearance at Peraton is based in 904, McDaniel Court, Herndon, Fairfax County, Virginia, 20170, United States. This is a on-site role.

Is this Incident Responder, Journeyman with Security Clearance job remote, hybrid, or on-site?expand_more

Peraton has listed this Incident Responder, Journeyman with Security Clearance role as on-site.

How much experience is required for this Incident Responder, Journeyman with Security Clearance role?expand_more

Incident Responder, Journeyman with Security Clearance at Peraton typically requires 2–6 years of relevant experience at the mid level level.

What skills do you need for the Incident Responder, Journeyman with Security Clearance role at Peraton?expand_more

Key skills for Incident Responder, Journeyman with Security Clearance at Peraton include Incident Response; Soc Analyst; Cybersecurity Operations; Edr; Siem; Packet Analysis; Network Analysis; and Log Forensics.

What education is required for Incident Responder, Journeyman with Security Clearance at Peraton?expand_more

Educational requirements for this role: Bachelor's degree in specified fields OR equivalent experience/training.

What category does the Incident Responder, Journeyman with Security Clearance role belong to?expand_more

Incident Responder, Journeyman with Security Clearance at Peraton is part of the it job category on Recrutus.

Incident Responder, Journeyman with Security Clearance