Cyber Security Incident Response Lead

Job Summary

Seeking a motivated Cyber Security Specialist, the fully remote SOC Incident Response Lead will manage night shift operations, focusing on monitoring, analyzing, investigating, and responding to threats across hybrid cloud and on-premise environments.

Key Responsibilities

• Perform advanced EDR analysis using tools like Trellix and conduct initial incident response for various threats
• Utilize Splunk for alert analysis and ServiceNow for case management, while supporting EDR platform administration
• Collaborate with engineering and system administrators to contain and remediate threats, while participating in threat hunting missions

Required Qualifications

• 5-7 years of relevant experience in cyber security
• Must obtain/maintain Public Trust clearance
• Experience with Splunk, EDR tools (e.g., Trellix), and AWS infrastructure
• Understanding of basic forensics, enterprise logging, and network protocols
• Familiarity with scripting languages such as PowerShell, Python, or Bash