Cyber Defense Incident Responder

Job Summary

Leading complex cyber investigations, the hybrid Associate Director, Cyber Defense - Staff Incident Responder will drive incident response, forensic analysis, and threat hunting while enhancing detection and response capabilities in a global environment.

Key responsibilities

• Lead complex cyber investigations and incident response, ensuring effective containment, eradication, and recovery
• Perform advanced forensic analysis and proactive threat hunting to identify attacker behavior and persistence mechanisms
• Develop and enhance incident response playbooks and workflows based on real-world threats to improve response effectiveness

Required qualifications

• 8+ years of hands-on experience in incident response, digital forensics, or security operations in enterprise environments
• Deep investigative expertise across endpoint, cloud, network, and identity domains, with experience in multi-source telemetry correlation
• Strong scripting and automation skills in languages such as Python, Go, PowerShell, or Bash
• Proven ability to independently lead complex investigations in high-pressure environments
• Strong understanding of attacker tactics, techniques, and procedures, including familiarity with frameworks like MITRE ATT&CK