Top 1349 Mitre Jobs | SimplyHired

Cyber Incident Response Analyst (DFIR) - ACTIVE SECRET PREFERRED - Remote
Cornerstone Technology —Remote
- $90,000 - $100,000 a year
- Full-time
- Remote
- Mid-level
- 3 years
- Analysis skills
- Health savings account
- Health insurance
Quick Apply
7d
Expert DevSecOps Engineer
MissionSquare —Washington, DC
- $128,490 - $205,580 a year
- Full-time
- 7 years
- Azure
- Bachelor of Science
- Tuition reimbursement
- 401(k) matching
SIEM Engineer
Summit 7 Systems —Huntsville, AL
- From $100,000 a year
- Full-time
- Azure
- Computer Science
- 5 years
- Dental insurance
- 401(k) matching
Quick Apply
Picture Framer - frame shop
ModernMemoryDesign.com —Passaic, NJ
- $21 - $24 an hour
- Full-time
- Carpentry
- Background check
- Microsoft Excel
- Employee discount
- Flexible schedule
Quick Apply
Senior Security Engineer & Workday
Hudson Manpower —Harrisburg, PA
- Full-time
- Hybrid work
- Azure
- Windows
- AWS
Quick Apply
Program Specialist - Part Time
Girl Scouts of the Desert Southwest —Carlsbad, NM
- $14 - $15 an hour
- Temporary
- Background check
- Microsoft Outlook
- Computer literacy
- Employee discount
- Flexible schedule
Quick Apply
AI Security Consulting Director
CNA Insurance —Chicago, IL
- $97,000 - $189,000 a year
- Full-time
- Hybrid work
- 5 years
- Analysis skills
- Senior level
Security Engineer III, SIEM Engineer (Secret Clearance)
Deloitte —Baltimore, MD
- $102,500 - $188,900 a year
- Full-time
- Azure
- Computer Science
- Office
SOC Analyst
Provalus —Jasper, TX
- Weekends as needed
- Research
- Windows
- Analysis skills
- Health insurance
- Dental insurance
Quick Apply
7d
Senior Security Engineer Platform AI Security
CNA Insurance —Chicago, IL
- $72,000 - $141,000 a year
- Full-time
- Senior level
- Communication skills
- 10 years
Security Engineer III, SIEM Engineer (Secret Clearance)
Deloitte —Arlington, VA
- $102,500 - $188,900 a year
- Full-time
- Azure
- Computer Science
- Office
Residential Construction Worker
Garro Homes LLC —Greenville, SC
- $20 - $25 an hour
- 8 hour shift
- Background check
- Up to 50% travel
- Construction site
- Paid holidays
- Paid time off
Quick Apply
Cyber Threat Intelligence Hunter
Leidos —Hickam AFB, HI
- $107,900 - $195,050 a year
- Full-time
- 6 years
- Analysis skills
- Project management
Security Control Assessment Lead
CGI Group, Inc. —Washington, DC
- $127,500 - $276,200 a year
- Office
- Analysis skills
- Bachelor's degree
- Paid parental leave
- Paid holidays
Tier 2 Shift Lead / Secret
Peraton —Beltsville, MD
- $104,000 - $166,000 a year
- Day shift
- Azure
- Master's degree
- Analysis skills
- Health savings account
- Paid holidays
Incident Response Manager
Crowe —Tallahassee, FL
- $110,800 - $226,400 a year
- Full-time
- 7 years
- Azure
- Windows
Quick Apply
12d
Cybersecurity Vulnerability Analyst
Peraton —Linthicum, MD
- $104,000 - $166,000 a year
- Monday to Friday
- Computer Science
- Customer service
- Mid-level
- Health savings account
- Paid holidays
Machine Operator
McFarlane's —Sauk City, WI
- Mid-level
- Forklift
- 3 years
- Health savings account
- Paid holidays
Quick Apply
7d
Incident Response Manager
Crowe —Sarasota, FL
- $110,800 - $226,400 a year
- Full-time
- 7 years
- Azure
- Windows
Quick Apply
12d
Enterprise Data Security Architect
Resolution Technologies —Duluth, GA
- Hybrid work
- Azure
- System design
- HIPAA
- Health savings account
- Disability insurance

I want to receive the latest job alert for mitre

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Explore jobs in more locations

mitre jobs near

Cyber Incident Response Analyst (DFIR) - ACTIVE SECRET PREFERRED - Remote

Cornerstone Technology
Remote

Quick Apply

Job Details

Full-time
$90,000 - $100,000 a year
7 days ago

Benefits

Health savings account
Health insurance
Dental insurance
401(k)
Flexible spending account
Paid time off
Vision insurance
401(k) matching
Employee discount
Life insurance
Retirement plan

Qualifications

Content creation for technical audiences
Technical documentation
Secret Clearance
Incident management operations support
Security threat response protocols
Log analysis tools
DoD 8570
SOAR platforms
Cybersecurity investigations
MITRE ATT&CK
Technical writing experience within technology
CompTIA Security+
Incident response implementation

Full Job Description

Job Title: Cyber Incident Response Analyst

Location: Remote (Offsite-eligible, U.S.-based); occasional on-site support as required

Clearance Required: Active Secret clearance preferred. Candidates who are eligible to obtain the required Tier 3 (T3) / IT-II background investigation are encouraged to apply.

Employment Type: Full-Time

Overview

Cornerstone Technology Enterprises is seeking experienced cybersecurity professionals to support a large Department of Defense enterprise cybersecurity program for our government customer. For this position, we are hiring a Cyber Incident Response Analyst to investigate, contain, and eradicate cyber threats as part of a 24x7 Cyber Incident Response Team (CIRT). If you live for the hunt — running down alerts, scoping an incident, and driving it to clean recovery — this role is built for you.

This is a remote-eligible role supporting a 24x7 CIRT, with after-hours on-call coverage (historically about one after-hours incident response per quarter, with one-hour recall). Day to day, you will conduct technical investigations into cybersecurity events and incidents, provide the facts and technical detail needed for containment and eradication, recommend and coordinate mitigations that harden systems against recurrence, and document everything to standard within tight notification timelines.

You’ll support one of the Department of Defense’s largest enterprise environments, spanning approximately 15,000 network and endpoint devices, hundreds of mission applications, and globally deployed identity management systems.

Candidates with an incident response, SOC, DFIR, threat hunting, or cybersecurity analyst background are strongly encouraged to apply. This role is classified under a contract labor category as Network Engineer; the work is cyber incident response and analysis, not network engineering. You must be able to support an after-hours on-call rotation as part of 24x7 CIRT coverage.

What You Will Do

Incident Investigation, Containment & Eradication (~35%)

Participate as a member of the CIRT, conducting technical investigations into cybersecurity events and incidents
Provide facts, technical detail, and risk-reduction methods to drive containment, eradication, and recovery
Implement mitigation techniques and corrective actions to harden systems against recurrence, and follow up to ensure changes are completed

Playbooks, SOAR & Automation (~20%)

Develop and maintain incident response Tactics, Techniques, and Procedures (TTPs) and playbooks — key tasks, tools, decision points, and escalation paths
Integrate SOAR automation into response workflows to accelerate triage, enrichment, and response
Incorporate lessons learned, after-action reports, and table-top results into continuous TTP and playbook improvement

Reporting & Notification (~20%)

Notify and report cybersecurity events and incidents within required timeframes (CJCSM 6510.01B and incident-response SOPs)
Complete closure notes and incident reports within established timelines, categorizing events and incidents correctly
Produce weekly event/incident summaries and keep government cybersecurity leadership informed of major incidents

Coordination, Forensics & Exercises (~25%)

Coordinate with DoD Cyber Service Providers (CSSPs) and higher cyber commands for incident triage, mitigation, and forensic analysis, including chain-of-custody duties
Serve as primary point of contact for externally reported incidents and perform correlation analysis across incidents
Plan and run incident response drills and table-top exercises to test and continuously improve the incident response plan

Required Qualifications

Active Secret clearance preferred. Candidates who are eligible to obtain the required background investigation are encouraged to apply.
U.S. citizenship (required for CAC and DoD network access)
Ability to support an after-hours on-call rotation as part of 24x7 CIRT coverage (one-hour recall)
3+ years of experience in cyber incident response, SOC analysis, or digital forensics and incident response (DFIR)
Hands-on experience investigating, containing, and remediating security incidents
Experience with SIEM and SOAR platforms (e.g., Splunk, Microsoft Sentinel, Elastic, Palo Alto Cortex XSOAR, or similar)
Working knowledge of attacker tactics and the incident response lifecycle, including the MITRE ATT&CK framework
Strong technical writing for incident reports, TTPs, and notifications under tight timelines
CompTIA Security+ (or ability to obtain within 30 days of start) to meet the DoD 8140/8570 baseline

Preferred Qualifications

Experience on a DoD or federal CIRT/CSIRT coordinating with Cyber Service Providers (CSSPs) and higher cyber commands
Hands-on SOAR automation development (e.g., Cortex XSOAR, Splunk SOAR/Phantom, Tines, or similar)
Digital forensics or malware analysis experience, including chain-of-custody handling
Familiarity with CJCSM 6510.01B incident categorization and DoD incident reporting requirements
Alignment to DCWF Work Role 531 (Cyber Defense Incident Responder); certifications such as GCIH, GCFA, CySA+, or CEH
Familiarity with endpoint detection and response (EDR) and tools such as Tanium, Trellix, or Palo Alto firewalls/IPS
Experience supporting a large-scale DoD IT operations program in a federal/DoD environment

Why Join Cornerstone?

Cornerstone Technology Enterprises is a veteran-owned small business with deep experience supporting federal and defense missions. Our teams operate inside production environments, supporting systems that matter, while maintaining a culture that values trust, accountability, and technical excellence.

This role puts you on the team that responds when it matters most — containing threats, driving clean recovery, and hardening the enterprise so the same thing does not happen twice. It is a chance to sharpen your incident response and DFIR skills on a national-level DoD mission, working alongside Cyber Service Provider and cyber-command partners across the defense community.

Pay: $90,000.00 - $100,000.00 per year

Benefits:

401(k)
401(k) matching
Dental insurance
Employee discount
Flexible spending account
Health insurance
Health savings account
Life insurance
Paid time off
Retirement plan
Vision insurance

Application Question(s):

This role is part of a 24x7 CIRT with an after-hours on-call rotation and one-hour recall. Are you able and willing to support that?
Due to U.S. Government contract requirements, this position requires U.S. citizenship and eligibility for a Secret security clearance. Do you meet these requirements?

License/Certification:

CompTIA Security+ (Required)

Security clearance:

Secret (Preferred)

Work Location: Remote

Quick Apply

Refine Your Search

mitre jobs

Cyber Incident Response Analyst (DFIR) - ACTIVE SECRET PREFERRED - Remote

Expert DevSecOps Engineer

SIEM Engineer

Picture Framer - frame shop

Senior Security Engineer & Workday

Program Specialist - Part Time

AI Security Consulting Director

Security Engineer III, SIEM Engineer (Secret Clearance)

SOC Analyst

Senior Security Engineer Platform AI Security

Security Engineer III, SIEM Engineer (Secret Clearance)

Residential Construction Worker

Cyber Threat Intelligence Hunter

Security Control Assessment Lead

Tier 2 Shift Lead / Secret

Incident Response Manager

Cybersecurity Vulnerability Analyst

Machine Operator

Incident Response Manager

Enterprise Data Security Architect

I want to receive the latest job alert for mitre

Related Searches

Explore jobs in more locations

Job Seeker Tools

Employer Tools

Browse

Stay Connected