Security & Cyber Incident Response Engineer

Responsibilities

• Lead technical investigation activities across endpoints, servers, networks, cloud environments, identities, applications, and other enterprise platforms
• Coordinate and execute technical containment, eradication, and remediation activities
• Maintain a comprehensive incident timeline and document investigative findings and technical decisions
• Partner with Security Operations, Cyber Threat Intelligence, and Digital Forensics teams
• Serve as Incident Response Lead for complex and high-severity cybersecurity incidents
• Apply threat intelligence and adversary behavior analysis during active investigations
• Lead and participate in incident response exercises and tabletop simulations
• Independently develop and coordinate technical response strategies for complex incidents
• Validate the effectiveness of containment and remediation actions
• Coordinate secure recovery of affected systems and services
• Coordinate technical response activities with third-party vendors and cloud providers
• Maintain accurate, timely, and auditable Security Incident Records (SIRs) within ServiceNow
• Communicate technical findings, risks, and incident impact to leadership and stakeholders
• Identify systemic security control and monitoring gaps
• Serve as a technical resource and mentor for less-experienced security engineers

Requirements

• Bachelor's degree in computer science, information security or related field
• Industry certifications such as CompTIA Security+, CompTIA CySA+, or GIAC Certified Incident Handler (GCIH)
• 5+ years of cybersecurity experience, including significant hands-on experience in security incident response or security operations
• Knowledge of incident response processes (detection, triage, research, remediation, and reporting)
• Knowledge of administration and use of Linux, Mac, and Windows systems
• Knowledge of complex cloud environments, specifically Azure and Amazon AWS
• Ability to communicate complex technical findings, risks, and recommendations effectively to technical and non-technical audiences
• Proficient in written and spoken English