Incident Response Expert III

{
  "content_hash": "6b1703484bb3dd565e00483c334977e6299d8a055b222f42572e32cdca9c1889",
  "source_hash": "56b7924b24e9c0fcae391c5dc279aabd442517d9f94f1e6926d915f8dc729722",
  "last_changed_at": "2026-06-06T12:11:21.939Z",
  "active_status": "active"
}

{
  "language": "en",
  "location": {
    "raw": "Columbia, MD, US, Columbia, MD",
    "city": "Columbia",
    "region": "MD",
    "country": "United States",
    "is_remote": false,
    "confidence": 0.95
  },
  "salary_max": null,
  "salary_min": null,
  "inferred_at": "2026-06-06T12:11:21.905Z",
  "launch_scope": {
    "reason": "english_us_canada",
    "included": true,
    "language": "en",
    "location": {
      "raw": "Columbia, MD, US, Columbia, MD",
      "city": "Columbia",
      "region": "MD",
      "country": "United States",
      "is_remote": false,
      "confidence": 0.95
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": null,
  "salary_period": null,
  "workplace_type": null,
  "salary_currency": null
}

{}

{
  "detail": {
    "links": [],
    "itemID": "9201207641246_1",
    "postDate": "2026-04-24T11:42:00.000-04:00",
    "workLevelCode": {
      "shortName": "Full Time"
    },
    "customFieldGroup": {
      "dateFields": [
        {
          "nameCode": {
            "codeValue": "PostingDate"
          },
          "dateValue": "2026-04-24T11:42Z"
        },
        {
          "nameCode": {
            "codeValue": "CurrentServerDateTime"
          },
          "dateValue": "2026-06-06T08:11Z"
        }
      ],
      "numberFields": [
        {
          "numberValue": 0,
          "categoryCode": {
            "codeValue": "ApplicantCount"
          }
        },
        {
          "categoryCode": {
            "codeValue": "AwardAmount"
          }
        }
      ],
      "stringFields": [
        {
          "nameCode": {
            "codeValue": "ExternalJobID"
          },
          "stringValue": "570996"
        },
        {
          "nameCode": {
            "codeValue": "CareerCenterRefId"
          }
        },
        {
          "nameCode": {
            "codeValue": "GuidelineOid"
          }
        },
        {
          "nameCode": {
            "codeValue": "CurrencySymbolOrCode"
          }
        },
        {
          "nameCode": {
            "codeValue": "HomeDepartment"
          },
          "stringValue": ""
        },
        {
          "nameCode": {
            "codeValue": "JobClass"
          },
          "stringValue": "Professional"
        }
      ],
      "indicatorFields": [
        {
          "nameCode": {
            "codeValue": "PriortyStatusFlag"
          },
          "indicatorValue": false
        },
        {
          "nameCode": {
            "codeValue": "InternalPostingFlag"
          },
          "indicatorValue": false
        },
        {
          "nameCode": {
            "codeValue": "MinValue"
          },
          "indicatorValue": true
        },
        {
          "nameCode": {
            "codeValue": "IsVsidApplicable"
          },
          "indicatorValue": true
        },
        {
          "nameCode": {
            "codeValue": "IsSassDlReqForExtPostFlag"
          },
          "indicatorValue": false
        },
        {
          "nameCode": {
            "codeValue": "IsSassDlReqForIntPostFlag"
          },
          "indicatorValue": false
        },
        {
          "nameCode": {
            "codeValue": "IsMonetaryFlag"
          },
          "indicatorValue": false
        },
        {
          "nameCode": {
            "codeValue": "IsNonMonetaryFlag"
          },
          "indicatorValue": false
        }
      ]
    },
    "requisitionTitle": "Incident Response Expert III",
    "clientRequisitionID": "2797",
    "organizationalUnits": [],
    "postingInstructions": [],
    "additionalProperties": {},
    "requisitionLocations": [
      {
        "address": {
          "cityName": "Columbia",
          "postalCode": "21045",
          "countrySubdivisionLevel1": {
            "codeValue": "MD"
          }
        },
        "nameCode": {
          "shortName": " Columbia, MD, US"
        },
        "aliasNames": []
      }
    ],
    "screeningRequirements": [],
    "requisitionDescription": "<p style=\"margin-left:0in;\" data-pasted=\"true\">Responsibilities: - Serves as hunt and incident response subject matter expert (SME), applying in-depth knowledge of threat actor (TA) tools, techniques, and procedures (TTPs)</p><p style=\"margin-left:0in;\">- Distills analytic findings into executive summaries and in-depth technical report</p><p style=\"margin-left:0in;\">- Provide expert support, analysis, and research with only broad direction into exceptionally complex problems and processes relating to the subject matter as it relates to hunt and incident response activities</p><p style=\"margin-left:0in;\">- Serves as technical expert on high-level incident response teams providing technical direction, interpretation, and alternatives</p><p style=\"margin-left:0in;\">- Exercises considerable latitude in determining technical objectives of an assignment or task at hand</p><p style=\"margin-left:0in;\">- Independently develops technical solutions to complex problems that require the regular use of ingenuity and creativity</p><p style=\"margin-left:0in;\">- Analyzes incident data and victim environments to recommend targeted mitigations</p><p style=\"margin-left:0in;\">- Advise technical personnel on countermeasure implementation and customization</p><p style=\"margin-left:0in;\">- Supports internal stakeholders on containment and eradication missions</p><p style=\"margin-left:0in;\">- Documents analysis in a standardized knowledgebase for sharing and publication</p><p style=\"margin-left:0in;\">- Assists in maintaining branch process and procedure documentation</p><p style=\"margin-left:0in;\">- Guides to the completion of hunt and incident response activities</p><p style=\"margin-left:0in;\">Required Skills:</p><p style=\"margin-left:0in;\">- U.S. Citizenship</p><p style=\"margin-left:0in;\">- Must have an active TS/SCI clearance</p><p style=\"margin-left:0in;\">- Must be able to obtain DHS Suitability</p><p style=\"margin-left:0in;\">- 5+ years of directly relevant experience in expertise</p><p style=\"margin-left:0in;\">- Must be able to travel domestically on short notice</p><p style=\"margin-left:0in;\">- Strong understanding of network architecture/security</p><p style=\"margin-left:0in;\">- Experience performing cyber incident response</p><p style=\"margin-left:0in;\">- Ability to think independently</p><p style=\"margin-left:0in;\">- Demonstrates superior written and oral communication skills</p><p style=\"margin-left:0in;\">- Must be able to work collaboratively across physical locations</p><p style=\"margin-left:0in;\">- Skilled in identifying different classes of attacks and attack stages</p><p style=\"margin-left:0in;\">- Understanding of system and application security threats and vulnerabilities</p><p style=\"margin-left:0in;\">- Understanding of proactive analysis of systems and networks, to include creating trust levels of critical resources</p><p style=\"margin-left:0in;\">- Proficiency with common operating systems (e.g. Linux/Unix, Windows)</p><p style=\"margin-left:0in;\">Desired Skills:</p><p style=\"margin-left:0in;\">- Experience leading and mentoring technical teams</p><p style=\"margin-left:0in;\">- Knowledge of Computer Network Defense policies, procedures and regulations</p><p style=\"margin-left:0in;\">- Knowledge of different operational threat environments (e.g., first generation [script kiddies], second generation [non-nation-state sponsored], and third generation [nation-state sponsored])</p><p style=\"margin-left:0in;\">- Knowledge of system and application security threats and vulnerabilities (e.g., buffer overflow, mobile code, cross-site scripting, PL/SQL and injections, race conditions, covert channel, replay, return- oriented attacks, and malicious code)</p><p style=\"margin-left:0in;\">- Network and System administration experience</p><p style=\"margin-left:0in;\">- Strong understanding of adversarial tactics/techniques/procedures (TTPs)</p><p style=\"margin-left:0in;\">- Experience with Identity and Access Management (IAM) tools</p><p style=\"margin-left:0in;\">- Ability to review and analyze Enterprise Architecture (EA) from a security perspective</p><p style=\"margin-left:0in;\">- Understanding of cyber defense-in-depth principles</p><p style=\"margin-left:0in;\">- Hands-on skill in host/network intrusion detection</p><p style=\"margin-left:0in;\">- Ability to perform event correlation</p><p style=\"margin-left:0in;\">- Experience with malicious activity analysis</p><p style=\"margin-left:0in;\">- Ability to collaborate with stakeholders at multiple levels within an organization</p><p style=\"margin-left:0in;\">Required Education:</p><p style=\"margin-left:0in;\">BS Computer Science, Cyber Security, Computer Engineering, or related degree; or HS Diploma &amp; 7+ years of technical experience in expertise.</p><p style=\"margin-left:0in;\">Desired Certifications: One or more - DoD 8140.01 IAT Level II, IASAE II, CSSP Analyst - DoD 8140.01 GCIA, GCIH, CSSP Analyst/CSSP Incident Responder - DoD 8140.01 CEH, CSSP Analyst - SANS GIAC GNFA preferred - SANS GRID, GICSP, or GCIP a plus</p>\n",
    "sponsoredVisaTypeCodes": []
  },
  "list_job": {
    "links": [],
    "itemID": "9201207641246_1",
    "postDate": "2026-04-24T11:42:00.000-04:00",
    "workLevelCode": {
      "shortName": "Full Time"
    },
    "customFieldGroup": {
      "dateFields": [
        {
          "nameCode": {
            "codeValue": "PostingDate"
          },
          "dateValue": "2026-04-24T11:42Z"
        },
        {
          "nameCode": {
            "codeValue": "CurrentServerDateTime"
          },
          "dateValue": "2026-06-06T08:11Z"
        }
      ],
      "numberFields": [
        {
          "numberValue": 0,
          "categoryCode": {
            "codeValue": "ApplicantCount"
          }
        },
        {
          "categoryCode": {
            "codeValue": "AwardAmount"
          }
        }
      ],
      "stringFields": [
        {
          "nameCode": {
            "codeValue": "ExternalJobID"
          },
          "stringValue": "570996"
        },
        {
          "nameCode": {
            "codeValue": "CareerCenterRefId"
          }
        },
        {
          "nameCode": {
            "codeValue": "GuidelineOid"
          }
        },
        {
          "nameCode": {
            "codeValue": "CurrencySymbolOrCode"
          }
        },
        {
          "nameCode": {
            "codeValue": "HomeDepartment"
          },
          "stringValue": ""
        },
        {
          "nameCode": {
            "codeValue": "JobClass"
          },
          "stringValue": "Professional"
        }
      ],
      "indicatorFields": [
        {
          "nameCode": {
            "codeValue": "PriortyStatusFlag"
          },
          "indicatorValue": false
        },
        {
          "nameCode": {
            "codeValue": "InternalPostingFlag"
          },
          "indicatorValue": false
        },
        {
          "nameCode": {
            "codeValue": "MinValue"
          },
          "indicatorValue": true
        },
        {
          "nameCode": {
            "codeValue": "IsVsidApplicable"
          },
          "indicatorValue": true
        },
        {
          "nameCode": {
            "codeValue": "IsSassDlReqForExtPostFlag"
          },
          "indicatorValue": false
        },
        {
          "nameCode": {
            "codeValue": "IsSassDlReqForIntPostFlag"
          },
          "indicatorValue": false
        },
        {
          "nameCode": {
            "codeValue": "IsMonetaryFlag"
          },
          "indicatorValue": false
        },
        {
          "nameCode": {
            "codeValue": "IsNonMonetaryFlag"
          },
          "indicatorValue": false
        }
      ]
    },
    "requisitionTitle": "Incident Response Expert III",
    "clientRequisitionID": "2797",
    "organizationalUnits": [],
    "postingInstructions": [],
    "additionalProperties": {},
    "requisitionLocations": [
      {
        "address": {
          "cityName": "Columbia",
          "postalCode": "21045",
          "countrySubdivisionLevel1": {
            "codeValue": "MD"
          }
        },
        "nameCode": {
          "shortName": " Columbia, MD, US"
        },
        "aliasNames": []
      }
    ],
    "screeningRequirements": [],
    "sponsoredVisaTypeCodes": []
  },
  "detail_meta": {
    "url": "https://workforcenow.adp.com/mascsr/default/careercenter/public/events/staffing/v1/job-requisitions/570996?cid=244a96b2-61cf-4805-839d-558c7cbe4e3c&ccId=19000101_000001&lang=en_US&locale=en_US",
    "http_status": 200,
    "content_type": "application/json;charset=UTF-8",
    "response_bytes": 8038
  },
  "detail_errors": []
}