Incident Response Lead/Advisor
About the job
- U.S. citizenship is required.
- An active TS/SCI clearance with CI polygraph is required.
- A bachelor's degree in a relevant field is required, or a relevant master's degree may substitute for two years of experience.
- DoD 8570 IAT Level II certification (CySA+) must be obtained within 30 days of contract start.
- Eight years of experience identifying, analyzing, and responding to security incidents such as cyberattacks, data breaches, and system vulnerabilities are required, or six years with a relevant master's degree.
- Experience monitoring and analyzing security logs and network traffic to detect anomalies is required.
- Experience executing incident-response playbooks and conducting digital forensics is required.
- Experience collaborating with IT and security teams to mitigate threats and prevent recurrence is required.
- Knowledge of cyber adversary tactics, techniques, and procedures is required.
- Experience analyzing advanced intrusions across a complex global network is required.
- Knowledge of basic cybersecurity forensics procedures is required.
- Ability to read and interpret malware analysis reports is required.
- Strong oral and written communication skills and the ability to interact effectively with technical and non-technical audiences are required.
- Technical editing skills for formal report production are required.
- Advise, mentor, and coach a team of cybersecurity professionals on incident-response best practices across a variety of networks, platforms, and tools.
- Work collaboratively across cross-functional teams and staff at multiple levels to deliver short-term, medium-term, and long-term response efforts.
- Monitor and analyze security logs and network traffic to detect anomalies.
- Execute incident-response playbooks and conduct digital forensics.
- Collaborate with IT and security teams to mitigate threats and prevent recurrence.
- Advise on security policies, risk management, and compliance.
- Support rotational shifts to ensure 24x7 coverage when required.
- Certified Ethical Hacker (CEH) certification.
- GIAC Certified Incident Handler (GCIH) certification.
- GIAC Certified Intrusion Analyst (GCIA) certification.
- Cyber Mission Force analyst or operator experience.
- Management experience.
- Experience with Department of Defense cybersecurity operations.
- Experience with classified system information assurance.
About the company
AnaVation provides IT engineering services to the U.S. Federal Government, focusing on complex technical and analytical challenges. It works by delivering contract-based projects that cover intelligence collection and processing, analytical systems, big data solutions, and cybersecurity, using cross-disciplinary engineering teams (called AnaVators) to tailor solutions to government needs. The company differentiates itself through a government-focused, cost-effective approach, deep technical expertise, and a values-driven culture that emphasizes building long-term partnerships and strong customer trust. Its goal is to help federal agencies improve operational efficiency, security, and decision-making by solving difficult technical problems and delivering reliable, mission-critical software and systems.
Company Size
51-200
Company Stage
N/A
Total Funding
N/A
Headquarters
Reston, Virginia
Founded
2013
Get referred to AnaVation
See people who can refer or advise you
Simplify's Take
What believers are saying
- AnaVation earned 2026 Best Places to Work, supporting recruiting and retention.
- FBI ITSSS-2 and MDA SHIELD expand addressable task orders through 2034.
- Open 2026 hiring for security and litigation support signals ongoing demand.
What critics are saying
- FBI and MDA vehicles intensify competition from Leidos, Booz Allen, and SAIC.
- Award concentration on federal contracts exposes revenue to protest delays and recompetes.
- Without non-government diversification, AnaVation depends on a few agencies and contracting officers.
What makes AnaVation unique
- AnaVation won FBI ITSSS-2, an eight-year, $8B vehicle in 2024.
- AnaVation joined MDA SHIELD in January 2026, a $151B IDIQ pool.
- CMMC Level 2 positions AnaVation for controlled government cyber work.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Health Insurance
- Dental Insurance
- Vision Insurance
- Disability Insurance
- 401(k) Retirement Plan
- 401(k) Company Match
- Paid Vacation
- Paid Holidays
- Professional Development Budget
- Life Insurance