Archived listing. The details below describe a past opening.
Required Skills & Experience
7+ years of cybersecurity experience with at least 3+ years focused on incident response, threat detection, security operations, or cyber defense Experience developing and executing Incident Response (IR) playbooks and response procedures Strong understanding of cybersecurity detection, triage, escalation, containment, eradication, and recovery processes Experience leading or facilitating tabletop exercises and cyber readiness assessments Knowledge of Operational Technology (OT), Industrial Control Systems (ICS), critical infrastructure, or highly regulated environments Experience developing detection workflows and operational response procedures Ability to analyze security incidents and produce after-action reports with remediation recommendations Experience conducting cybersecurity training, workshops, knowledge transfer sessions, or awareness programs Understanding of security operations center (SOC) processes and vulnerability management workflows Experience collaborating with leadership, operations teams, engineers, and cybersecurity stakeholders Strong written and verbal communication skills
Nice to Have Skills & Experience
Previous experience supporting the Social Security Administration or other Federal Civilian agencies Experience in OT/ICS cybersecurity environments Familiarity with MITRE ATT&CK for ICS Experience working with SIEM platforms such as Splunk, Microsoft Sentinel, QRadar, or Elastic Knowledge of OT monitoring platforms such as Dragos, Claroty, Nozomi Networks, Armis, or Tenable.ot Experience with ransomware response, threat hunting, and cyber exercises GIAC certifications (GCIH, GCIA, GCED, GRID, or GICSP) CISSP, CySA+, CASP+, or Security+ Experience developing training curricula or cybersecurity operational training programs
Job Description
Insight Global is seeking a Detection / Incident Response / Training SME for a top federal technology client supporting the Social Security Administration. This individual will serve as the subject matter expert responsible for building and maturing incident response capabilities within a newly established Operational Technology (OT) cybersecurity program. The ideal candidate will bring a combination of cyber defense expertise, incident response leadership, and training experience to help establish repeatable response processes and improve organizational readiness. This role will lead the development of OT-specific incident response playbooks, detection and triage workflows, tabletop exercises, and cybersecurity training programs. The selected candidate will work closely with cybersecurity leadership, engineers, and operational stakeholders to strengthen response capabilities, identify process improvements, and ensure personnel are prepared to effectively respond to cyber threats impacting mission-critical environments. This is a highly visible opportunity to influence the operational security posture of a new federal cybersecurity program from the ground up.
The pay range for this position is $65/hr - $75/hr