OT Detection / Incident Response / Training Lead

Job Description

Insight Global is seeking a Detection / Incident Response / Training SME for a top federal technology client supporting the Social Security Administration. This individual will serve as the subject matter expert responsible for building and maturing incident response capabilities within a newly established Operational Technology (OT) cybersecurity program. The ideal candidate will bring a combination of cyber defense expertise, incident response leadership, and training experience to help establish repeatable response processes and improve organizational readiness. This role will lead the development of OT-specific incident response playbooks, detection and triage workflows, tabletop exercises, and cybersecurity training programs. The selected candidate will work closely with cybersecurity leadership, engineers, and operational stakeholders to strengthen response capabilities, identify process improvements, and ensure personnel are prepared to effectively respond to cyber threats impacting mission-critical environments. This is a highly visible opportunity to influence the operational security posture of a new federal cybersecurity program from the ground up.

The pay range for this position is $65/hr - $75/hr

Skills and Requirements

7+ years of cybersecurity experience with at least 3+ years focused on incident response, threat detection, security operations, or cyber defense Experience developing and executing Incident Response (IR) playbooks and response procedures Strong understanding of cybersecurity detection, triage, escalation, containment, eradication, and recovery processes Experience leading or facilitating tabletop exercises and cyber readiness assessments Knowledge of Operational Technology (OT), Industrial Control Systems (ICS), critical infrastructure, or highly regulated environments Experience developing detection workflows and operational response procedures Ability to analyze security incidents and produce after-action reports with remediation recommendations Experience conducting cybersecurity training, workshops, knowledge transfer sessions, or awareness programs Understanding of security operations center (SOC) processes and vulnerability management workflows Experience collaborating with leadership, operations teams, engineers, and cybersecurity stakeholders Strong written and verbal communication skills Previous experience supporting the Social Security Administration or other Federal Civilian agencies Experience in OT/ICS cybersecurity environments Familiarity with MITRE ATT&CK for ICS Experience working with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or Elastic Knowledge of OT monitoring platforms such as Dragos, Claroty, Nozomi Networks, Armis, or Tenable.ot Experience with ransomware response, threat hunting, and cyber exercises GIAC certifications (GCIH, GCIA, GCED, GRID, or GICSP) CISSP, CySA+, CASP+, or SecurityExperience developing training curricula or cybersecurity operational training programs

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to HR@insightglobal.com.