Cybersecurity Incident Response Investigator

Job Summary

To support enterprise security operations, the fully remote IR & Threat Investigator will investigate security incidents, conduct threat hunting, and analyze indicators of compromise while collaborating with various teams to enhance incident response readiness.

Key responsibilities

• Investigate and respond to security incidents, performing triage, containment, eradication, and recovery activities
• Conduct threat hunting and investigations utilizing SIEM, EDR, and network telemetry
• Analyze indicators of compromise and emerging threats to improve detection capabilities

Required qualifications

• 5+ years of experience in cybersecurity focused on incident response and threat detection
• Strong foundational IT infrastructure experience in systems administration and networking
• Hands-on experience with SIEM platforms and forensic investigation methodologies
• Knowledge of MITRE ATT&CK and threat intelligence frameworks
• Experience supporting cloud environments such as Azure, AWS, or GCP