Incident Manager 2
No salary listed
Mid, Senior
Bachelor's
Arlington County, Arlington, VA, USA
In Person
CybersecuritySecurity Operations & Incident Response
No H1B Sponsorship
US Citizenship, US Top Secret Clearance Required
About the job
Requirements
- Must be a U.S. citizen.
- Must have an active Top Secret/Sensitive Compartmented Information clearance.
- Must be able to obtain Department of Homeland Security Suitability before starting employment.
- Must have 2 or more years of directly relevant experience in cyber incident management or cybersecurity operations.
- Must have a Bachelor of Science degree in Incident Management, Operations Management, Cybersecurity, or a related degree, or a high school diploma with 4 or more years of incident management or cybersecurity experience.
- Knowledge of incident response and handling methodologies.
- Knowledge of the National Cyber Incident Scoring System to prioritize incident triage.
- Knowledge of general attack stages, including footprinting and scanning, enumeration, gaining access, privilege escalation, maintaining access, network exploitation, and covering tracks.
- Skill in recognizing and categorizing types of vulnerabilities and associated attacks.
- Knowledge of basic system administration and operating system hardening techniques.
- Knowledge of Computer Network Defense policies, procedures, and regulations.
- Knowledge of different operational threat environments, including first-generation script kiddies, second-generation non-nation-state-sponsored, and third-generation nation-state-sponsored threats.
- Knowledge of system and application security threats and vulnerabilities, including buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channels, replay, return-oriented attacks, and malicious code.
- Must be able to work collaboratively across physical locations.
Responsibilities
- Research and compile known resolution steps or workarounds to mitigate potential Computer Network Defense incidents within the enterprise.
- Apply knowledge of the tactics, techniques, and procedures of criminal, insider, hacktivist, and nation-state threat actors to identify and validate threats.
- Apply cybersecurity concepts to detect and defend against intrusions into small- and large-scale IT networks, and conduct cursory analysis of log data.
- Monitor external data sources, including Computer Network Defense vendor sites, Computer Emergency Response Teams, SANS, and Security Focus, to stay current on Computer Network Defense threat conditions and determine which security issues may affect the enterprise.
- Identify the cause of an incident and recognize what to ask external entities about the incident's background and potential infection vector.
- Receive and analyze network alerts from enterprise sources and determine possible causes.
- Track and document Computer Network Defense incidents from initial detection through final resolution.
- Work with other organizational components to obtain and coordinate information about ongoing incidents.
- Provide support during assigned shifts.
Desired Qualifications
- Knowledge of basic system administration and operating system hardening techniques.
- Knowledge of Computer Network Defense policies, procedures, and regulations.
- Knowledge of different operational threat environments, including first-generation script kiddies, second-generation non-nation-state-sponsored, and third-generation nation-state-sponsored threats.
- Knowledge of system and application security threats and vulnerabilities, including buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channels, replay, return-oriented attacks, and malicious code.
- Desired certifications include GCIH, GCFA, GISP, GCED, CCFP, or CISSP.
About the company
Solutions³ provides end-to-end cybersecurity, ITOM, and ITSM consulting and training, offering advisory services, training, and implementation based on ITIL, NIST, and CIS standards. It works through a people-process-technology lifecycle and partners with the DVMS Institute to create, protect, deliver, and verify trusted digital value using the Digital Value Management System and related accreditations. The company differentiates itself with a standards-driven, end-to-end approach and recognized accreditations (APMG International, UK NCSC/GCHQ, DHS/CISA), plus a collaborative method that yields clearly defined, executable projects aligned to client missions and risk. Its goal is to help organizations of any size manage digital risk, improve resiliency, and derive value from digital services through training, mentoring, and proven governance and implementation practices.
Company Size
1-10
Company Stage
N/A
Total Funding
N/A
Headquarters
Wyckoff, New Jersey
Founded
2003
Get referred to Solutions³
See people who can refer or advise you
Simplify's Take
What believers are saying
- Nine-intern 2026 cybersecurity program builds a low-cost recruiting funnel and future delivery capacity.
- Partnerships with Trinity, OpenText, and Secure64 broaden offerings and improve bid credibility.
- Current DHS, FBI, and Navy awards create references for higher-value federal task orders.
What critics are saying
- Federal contract dependence exposes revenue to recompetes, budget delays, and protest risk in 2026.
- Large primes can bundle training and compliance work, squeezing Solutions³ margins and win rates.
- If federal cybersecurity spending slows, Solutions³ loses its core growth engine and hiring pipeline.
What makes Solutions³ unique
- Solutions³ won DHS/CISA Federal Cyber Defense Skilling Academy training in 2026.
- Solutions³ earned FBI Cyber Division training award and Navy SeaPort NxG participation in 2026.
- Solutions³ is a CMMC RPO, aligning offerings with federal compliance demand.
Help us improve and share your feedback! Did you find this helpful?
Benefits
- Remote Work Options