Incident Manager 3
Full-Time
$94k - $112k/yr
Senior
Bachelor's, Master's
Arlington County, Arlington, VA, USA
In Person
No H1B Sponsorship
US Citizenship, US Top Secret Clearance Required
About the job
Requirements
- Must be a United States citizen.
- Must hold an active TS/SCI clearance.
- Must be able to obtain DHS Suitability before starting employment.
- Must have 5-7 years of progressive experience in threat intelligence, security operations center operations, or cyber incident response.
- Demonstrated expertise in malware analysis, threat actor attribution, and cyber campaign analysis.
- Advanced proficiency with threat intelligence platforms, security information and event management tools, and analytical frameworks.
- Deep knowledge of the MITRE ATT&CK framework and intelligence-driven cyber defense concepts.
- Proven experience coordinating with federal agencies and managing complex stakeholder relationships.
- Strong understanding of critical infrastructure interdependencies and sector-specific threats.
- Exceptional analytical writing skills and the ability to communicate complex technical findings to diverse audiences.
- Experience briefing technical and non-technical audiences, including senior leadership.
- Must be able to work collaboratively across physical locations.
- Bachelor of Science degree in a technical discipline from an accredited college or university, including Computer Science, Cybersecurity, Computer Engineering, or a related discipline, or a high school diploma with 7+ years of directly relevant technical experience.
Responsibilities
- Conduct advanced triage and analysis of complex, high-severity cyber threat intelligence and indicator-of-compromise packages.
- Serve as the technical escalation point for challenging or ambiguous threat assessments requiring deep expertise.
- Perform sophisticated indicator-of-compromise enrichment using classified and unclassified intelligence sources.
- Coordinate directly with the FBI, NSA, USCYBERCOM, and other interagency partners on joint threat assessments.
- Provide technical mentorship and training to mid-level and junior triage analysts.
- Develop and refine analytical tradecraft, triage playbooks, and decision matrices.
- Lead special projects to enhance triage processes, automation, and threat detection capabilities.
- Author detailed threat assessments and intelligence briefs for JCDC leadership and partner organizations.
- Represent the triage team in interagency working groups and information-sharing forums.
- Identify patterns across multiple threat reports to detect emerging campaigns or threat actor activity.
- Conduct quality reviews of analyst products and provide constructive feedback.
- Support an after-hours on-call rotation for critical incidents requiring senior-level triage assessment.
- Contribute to strategic planning for JCDC operational capability development.
- Interface with critical infrastructure sector partners to understand threat concerns and provide tailored analysis.
Desired Qualifications
- Prior experience in federal government cybersecurity roles, including CISA, FBI, NSA, or DoD.
- Experience with the CISA National Cyber Incident Scoring System to prioritize incident triage.
- Knowledge of general attack stages, including footprinting and scanning, enumeration, gaining access, privilege escalation, maintaining access, network exploitation, and covering tracks.
- Demonstrated experience recognizing and categorizing vulnerabilities and associated attacks.
- Knowledge of Computer Network Defense policies, procedures, and regulations.
- Knowledge of different operational threat environments, including script kiddies, non-state-sponsored actors, and nation-state-sponsored actors.
- Knowledge of system and application security threats and vulnerabilities, including buffer overflow, mobile code, cross-site scripting, PL/SQL and injection attacks, race conditions, covert channels, replay attacks, return-oriented attacks, and malicious code.
- Published threat intelligence research or contributions to the open-source security community.
- Experience with threat hunting and proactive threat detection methodologies.
- Knowledge of foreign adversary cyber capabilities and the geopolitical threat landscape.
- Familiarity with the Privacy Act and information-handling requirements for government operations.
- Master's degree.
- CISSP, GCTI, GCFA, GREM, or similar advanced certification.
About the company
Solutions³ provides end-to-end cybersecurity, ITOM, and ITSM consulting and training, offering advisory services, training, and implementation based on ITIL, NIST, and CIS standards. It works through a people-process-technology lifecycle and partners with the DVMS Institute to create, protect, deliver, and verify trusted digital value using the Digital Value Management System and related accreditations. The company differentiates itself with a standards-driven, end-to-end approach and recognized accreditations (APMG International, UK NCSC/GCHQ, DHS/CISA), plus a collaborative method that yields clearly defined, executable projects aligned to client missions and risk. Its goal is to help organizations of any size manage digital risk, improve resiliency, and derive value from digital services through training, mentoring, and proven governance and implementation practices.
Company Size
1-10
Company Stage
N/A
Total Funding
N/A
Headquarters
Wyckoff, New Jersey
Founded
2003
Get referred to Solutions³
See people who can refer or advise you
Simplify's Take
What believers are saying
- Nine-intern 2026 cybersecurity program builds a low-cost recruiting funnel and future delivery capacity.
- Partnerships with Trinity, OpenText, and Secure64 broaden offerings and improve bid credibility.
- Current DHS, FBI, and Navy awards create references for higher-value federal task orders.
What critics are saying
- Federal contract dependence exposes revenue to recompetes, budget delays, and protest risk in 2026.
- Large primes can bundle training and compliance work, squeezing Solutions³ margins and win rates.
- If federal cybersecurity spending slows, Solutions³ loses its core growth engine and hiring pipeline.
What makes Solutions³ unique
- Solutions³ won DHS/CISA Federal Cyber Defense Skilling Academy training in 2026.
- Solutions³ earned FBI Cyber Division training award and Navy SeaPort NxG participation in 2026.
- Solutions³ is a CMMC RPO, aligning offerings with federal compliance demand.
Help us improve and share your feedback! Did you find this helpful?