More jobs:
Incident Response Principal Consultant
Job in
Vienna, Fairfax County, Virginia, 22184, USA
Listed on 2026-01-10
Listing for:
ConsultNet Technology Services and Solutions
Full Time
position Listed on 2026-01-10
Job specializations:
-
IT/Tech
Cybersecurity, Network Security
Job Description & How to Apply Below
Consult Net is seeking an Incident Response Principal Consultant to support one of our customers by working closely with their security team to design, implement, and mature enterprise security and incident response capabilities. The ideal candidate is highly technical, collaborative, and experienced in building and improving detection, monitoring, and response solutions across complex environments.
Base Pay$/yr - $/yr
Key Responsibilities- Work with the customer to establish a mature insider threat monitoring capability across Windows, Linux, and containerized environments
- Develop detection logic within the customer's SIEM solution
- Support the migration of detection logic, queries, and visualizations into a new SIEM platform
- Improve incident response processes and operational efficiency
- Support Tier 1 Security Operations with investigations and response activities
- Enhance early detection and mitigation of security risks
- Collaborate with stakeholders to address complex security challenges
- Assist with monitoring systems that support auditing, incident response, and system health
- Current (Active) Top Secret Security Clearance with SCI and CI Polygraph.
- Bachelor's degree in Computer Science, Engineering, Information Assurance, or a related discipline
- Additional experience may substitute for a degree
- 10+ years of relevant experience in security operations, incident response, or related roles
- Hands‑on experience with SIEM solutions such as Splunk, Kibana
, or similar tools - Experience with log telemetry structure and logic across Windows, Linux, and containerized environments
- Demonstrated proficiency with query languages
- Experience working with cloud service providers such as AWS, Azure, or Google Cloud
- Experience deploying and configuring data collection from operating systems, networking devices, and container platforms
- Experience creating dashboards, analytics, and alerts within SIEM tools
- Familiarity with the OSINT framework and related tools
- U.S. citizenship required to meet eligibility requirements for access to sensitive information
Mid‑Senior level
Employment TypeFull‑time
Job FunctionInformation Technology; IT Services and IT Consulting
Benefits- Medical insurance
- Vision insurance
- 401(k)
To View & Apply for jobs on this site that accept applications from your location or country, tap the button below to make a Search.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).
Search for further Jobs Here:
×