Cyber Forensics Jobs in Minnesota (NOW HIRING)

Posted Tuesday, August 4, 2026 at 4:00 AM

ASRC Federal is a leading government contractor furthering missions in space, public health and defense. As an Alaska Native owned corporation, our work helps secure an enduring future for our shareholders. Join our team and discover why we are atop veteran employer and Certified Great Place to Work™

ASRC Federal is seeking a highly skilled and experiencedCyber Incident Responderto join our dynamic team on theday shift ( 0600 – 1600 ), providing extended-hours coverage that includesweekend and holiday rotations. This is afully on-site positionat Quantico Marine Corps Base, VA —no telework is available for this role.

The successful candidate will serve as a front-line defender, rapidly detecting, triaging, containing, and eradicating cyber threats across our enterprise infrastructure. This role is critical for minimizing the impact of security incidents, coordinating response actions, and preserving forensic evidence in support of Department of Defense (DoD) missions.

The Cyber Incident Responder is a vital role responsible for executing the full incident response lifecycle duringday shift, weekend, and holiday coverage windows. This position focuses on detecting and responding to security incidents in real time, performing containment and eradication actions, and coordinating recovery efforts using enterprise tools such asSIEM, SOAR, CrowdStrike, CyberArk, and Endpoint Security Suite (ESS).

The Incident Responder will collaborate with cross-functional IT and security teams to:

• Execute incident response procedures in accordance withNIST SP 800-61and DoD guidelines
• Coordinate with JFHQ-DODIN on cyber incident reporting and remediation
• Support insider threat response and investigations
• Contain and remediate compromised systems, accounts, and endpoints
• Preserve and document forensic evidence for incident case management
• Maintain incident response playbooks and ensure high operational readiness during all covered hours
• At least Five (5) years of hands-on technical cybersecurity experience and knowledge of incident response concepts, Computer Network Defense, DISA Security Technical Implementation Guides (STIGs), DoD A&A Process, NIST SP 800-53, NIST SP 800-61, CJCSM 6510.01B, United States Cyber Command guidelines, and other applicable DoD Cyber Security and Computer Network Defense policies.
• Active Top-Secret Clearance REQUIRED , eligible to be upgraded to TS/SCI.
• Must meetDoD 8570 certification requirements at time of hire—IAT Level II(e.g., CCNA Security, CySA+, GICSP, GSEC, Security+, SSCP);CSIH, GCIH, or GCFA preferredfor incident handling.
• Willingness and availability to work the day shift ( 0600 – 1600 ), including weekend and holiday rotations, fully on-site at Quantico, VA.

• Knowledge of computer network defense concepts, DISA Security Technical Information Guides, DoD A&A Process, NIST SP 800-53, NIST SP 800-61, CJCSM 6510.01 B, United States Cyber Command guidelines, and other applicable DoD Cybersecurity and Computer Network Defense Policies Cybersecurity and Computer Network Defense policies
• Develop, maintain, and provide a weekly brief that captures all the cyber events including metrics and trends.
• Ability to provide continuous monitoring, data to include but not limited to network and host vulnerability scanning IDS, firewall, network sensor tuning, net flow/packet capture (PCAP). Collect and keep audit data in order to conduct a technical analysis relating to misuse, penetration, or other incidents.
• Document incidents, response actions, and remediation recommendations in accordance with government reporting requirements.
• Monitor multiple environments for malicious or anomalous activity using SIEM, SOAR, and on-prem security tooling.
• Analyze logs, telemetry, alerts, and audit data to identify indicators of compromise (IOCs) and attack patterns.

• This is afully on-site positionat DCSA facilities, Quantico Marine Corps Base, VA.Telework is not offered for this shift.
• Must work the assignedday shift (0600 – 1600)and supportweekend and holiday coverageas scheduled.
• Must be able to communicate complex technical ideas to a diverse customer base, both verbally and in written form.

We invest in the lives of our employees, both in and out of the workplace, by providing competitive pay and benefits packages. Benefits offered may include health care, dental, vision, life insurance; 401(k); education assistance; paid time off including PTO, holidays, and any other paid leave required by law. The salary offered will depend on several factors including, but not limited to, relevant experience, skills, education, geographic location, internal equity, business needs, and other factors permitted by law. Posted pay ranges are a general guideline only and are not a guarantee of compensation or salary.

ASRC Federal and its Subsidiaries are Equal Opportunity employers. All qualified applicants will receive consideration for employment without regard to race, gender, color, age, sexual orientation, gender identification, national origin, religion, marital status, ancestry, citizenship, disability, protected veteran status, or any other factor prohibited by applicable law.