Cyber Security Incident Response Lead

Job Summary

Leading cybersecurity incident response efforts, the full-time Cyber Security Incident Response Lead will serve as the technical authority during incidents across hybrid cloud and on-prem environments, coordinating with cross-functional teams to drive rapid threat containment and eradication while working remotely.

Key responsibilities

• Manage and lead incident response efforts for large-scale cybersecurity incidents
• Coordinate with cross-functional teams to ensure effective threat containment and eradication
• Drive the maturation of Security Operations Center (SOC) capabilities and incident response programs

Required qualifications

• 10+ years of hands-on cybersecurity experience, including 6+ years in incident response or digital forensics roles
• Demonstrated leadership in managing incidents affecting cloud environments, preferably AWS
• Deep expertise in digital forensics, log analysis, and SIEM tools such as Splunk
• Strong understanding of cybersecurity frameworks like MITRE ATT&CK and NIST SP 800-61
• U.S. Citizenship and ability to obtain Public Trust 6C clearance