Night Shift Cyber Incident Response Engineers
Night Shift Cyber Incident Response Engineers
Location: Remote (must reside in the state of Texas)
Contract: 12–18 months
Shift: 3rd Shift | Includes weekends, federal, and state holidaysNote: These roles primarily support overnight shift work (5 PM – 8 AM).We’re seeking a team of 5 skilled Tier 2 Night Shift Incident Response Engineers to join a 24x7 Cybersecurity Operations Center supporting a large client. These roles are critical in identifying, analyzing, and containing cybersecurity threats during overnight and off-hour shifts. This is an exciting opportunity to help protect vital digital infrastructure within a high-impact environment. You’ll be part of a dedicated cybersecurity team, leveraging advanced tools in a real-time operations setting,. making a meaningful difference from day one!Qualifications:
- 3+ years of hands-on experience in cybersecurity, focusing on intrusion detection, incident response, and threat intelligence
- 4+ years of experience making fast, sound decisions in high-pressure environments
- Strong knowledge of current cyber threats, attack vectors, and mitigation strategies
- Experience utilizing threat intelligence to anticipate and respond to risks
- Proficiency with industry-standard detection tools and forensic techniques
- Experience working with the Cisco Security Suite
- Familiarity with government incident response frameworks (e.g., State of Texas Red Book or similar)
- Background supporting government agencies or large enterprise environments
- Strong verbal and written communication skills for effective collaboration and reporting
- Monitor network traffic and system activity for signs of compromise or abnormal behavior
- Conduct detailed investigations and lead incident response efforts
- Collaborate with team members to contain, eradicate, and recover from threats
- Create comprehensive incident reports and maintain documentation (runbooks, playbooks, etc.)
- Contribute to continuous improvement of incident response processes through post-incident analysis
- Report to and follow direction from the Cybersecurity Operations Center team lead