Cyber Incident Response Team (CIRT) Lead

**This position is contingent upon contract award**

SOSi is seeking highly qualified senior professionals to support a DHS enterprise cybersecurity program providing 24/7 Security Operations Center (SOC) services. These roles deliver leadership, operational oversight, and technical expertise across cyber defense, incident response, intelligence, engineering, and modernization activities.

Job Description

Leads the end-to-end incident response function for the DHS enterprise SOC, coordinating triage, containment, eradication, and recovery; drives tool efficacy (SIEM/EDR/IDS/IPS), case management, and communications with stakeholders.

Responsibilities

• Lead incident detection, analysis, escalation, and coordinated response across SOC towers.
• Standardize IR runbooks, playbooks, and communications; ensure evidence handling and documentation.
• Measure and improve MTTA/MTTR; track lessons learned and corrective actions.
• Ensure IR alignment to DHS/CBP policy and reporting requirements.