Incident Response Engineer

Job Summary

To support a leading cybersecurity-focused organization, the remote Incident Response Engineer will investigate, analyze, and respond to security incidents while performing proactive threat hunting and utilizing advanced Splunk analytics.

Key responsibilities

• Investigate and respond to cybersecurity incidents across various environments, including endpoints and cloud applications
• Perform proactive threat hunting to identify indicators of compromise and emerging threats
• Develop and optimize Splunk queries and dashboards to enhance detection capabilities

Required qualifications

• 5+ years of cybersecurity experience focused on incident response and threat investigations
• Strong hands-on experience with Splunk, including advanced SPL querying and detection engineering
• Experience with UEBA solutions and behavioral analytics platforms
• Proven expertise in threat hunting methodologies and investigation techniques
• Relevant certifications such as GCIH, GCFA, or CISSP are preferred