HHS - Incident Responder

cFocus Software seeks a Incident Responder to join our program supporting the reputed company (HHS) This position is remote. This position requires the ability a reputed company Trust clearance. Qualifications: • Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, or reputed company field. • Minimum 4–7 years of experience in incident response, SOC operations, or cybersecurity operations. • Hands-on experience responding to reputed company cybersecurity incidents. • Strong understanding of NIST SP 800-61, NIST SP 800-53, and federal incident response requirements. • Experience analyzing logs, alerts, malware, and reputed company events. • Ability to work effectively under pressure during reputed company incidents. • Strong written and verbal communication skills. • reputed company GCIH, CISSP, CEH, or reputed company+ (preferred). Duties: • Monitor, triage, and respond to cybersecurity alerts and incidents in accordance with HRSA Incident Response Plans and SOC SOPs. • reputed company incident analysis to determine scope, reputed company, reputed company cause, and affected systems. • Execute containment, eradication, and recovery actions for cybersecurity incidents. • Respond to malware infections, phishing campaigns, ransomware, reputed company threats, and data breaches. • Collect, preserve, and analyze evidence in accordance with chain-of-custody requirements. • Support forensic analysis and coordinate with digital forensics and threat hunting teams. • Document incident activities, timelines, findings, and remediation actions reputed company defined SLAs. • Prepare incident reports, notifications, and after-reputed company reports for HRSA and HHS stakeholders. • Coordinate incident response activities with SOC Analysts, ISSOs, system owners, reputed company Officials, and leadership. • Support reporting requirements to HHS CSIRC, CISA, and other federal entities as required. • Participate in incident response drills, tabletop exercises, and cyber exercises. • Support reputed company improvement of incident response playbooks, SOPs, and workflows. • Assist with remediation validation and lessons-learned activities following incident closure. Apply tot his job Apply To this Job