Cyberspace Incident Manager, Lead Associate
Peraton · Fort Gordon, GA, US
About this role
## Responsibilities Peraton seeks a **Cyberspace Incident Manager** to support **ARCYBER G3** (Fort Gordon, GA). - Manage the lifecycle of suspected and confirmed cyberspace incidents across the Army’s portion of the DoD/DoW enterprise automation environments (unclassified and classified) - Intake, categorization, prioritization, escalation, task order generation, and closure tracking - Ensure incidents are documented and routed in accordance with **CJCSM 6510.01B**, **AR 25-2**, **DA PAM 25-2**, and other applicable directives - Track response actions to resolution and verify timely reporting to all responsible parties within required timelines - Receive and process threat intelligence products and **Indicators of Attack/Indicators of Compromise** - Translate findings into actionable Task Orders for dissemination to mission owners - Track remediation actions to completion across the enterprise - Perform **Quality Assurance/Quality Control** across incident management records in support of **ARCYBER G3 reporting standards** - Coordinate and route incidents and relevant findings to appropriate organizations (including superior, lateral, and subordinate organizations, as well as the Army Criminal Investigation Division and relevant intelligence warfighting functions) - Produce and deliver incident management reporting - Verbal briefings, technical write-ups, and data visualizations - Use tools such as **Microsoft Power BI**, **Power Automate**, and **Power Apps** to build leadership dashboards and automate recurring workflows - Develop and maintain continuity documents and **CSSP accreditation artifacts** - Facilitate incident management working groups and coordinate with internal/external mission partners to achieve government-defined enterprise outcomes - Support directorate and **ARCYBER-level MDMP** efforts for incident-management-relevant functions ## Qualifications ### Required - **Minimum 5 years** with **BS/BA** - **Minimum 3 years** with **MS/MA** - **Minimum 0 years** with **PhD** - Will consider **HS + 9 years** or **Associates + 7 years** - Demonstrated enterprise-scale cyberspace incident management expertise - Incident lifecycle governance, reporting standards enforcement, cross-organizational coordination, and process standardization across large DoD networks - Deep familiarity with **CJCSM 6510.01B**, **AR 25-2**, **DA PAM 25-2**, and DoD incident handling/escalation procedures - Must possess **DoD 8570** certification for **IAT Level II** (e.g., CCNA, CySA+, GICSP, GSEC, Security+, CND, SSCP) - Must possess **DoD 8570** certification for **CSSP-Analyst** (e.g., CEH, CFR, CCNA, CySA+, GCIA, GCIH, GICSP, Cloud+, SCYBER, PenTest+) - Able to support **8x5 operations** with on-call surge support as mission requires - **U.S. Citizenship required** - **Active TS** with ability to obtain/maintain **SCI, Polygraph, and MEAD** clearance ### Preferred - Hands-on experience with the Army’s Incident Management program of record (unclassified and/or classified automation environments) - Experience with **USCYBERCOM reporting tools** or DoD **CSSP reporting pipelines** - Familiarity with Microsoft Defender suite at a dashboard/reporting level for operational situational awareness - Experience developing/contributing to **Microsoft Power Platform** dashboards or equivalent operational metrics reporting - Experience with **ServiceNow** or comparable ITSM platforms used in incident management workflows - Experience with
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.