Incident Response Engineer

Job Summary

Working remotely, the full-time Incident Response Engineer will investigate, analyze, and respond to cybersecurity incidents while performing proactive threat hunting and utilizing advanced Splunk analytics to enhance detection capabilities.

Key responsibilities:

• Investigate and respond to cybersecurity incidents across various environments, including endpoints and cloud applications
• Conduct proactive threat hunting to identify indicators of compromise and emerging threats
• Develop and optimize Splunk queries and dashboards for improved detection and response

Required qualifications:

• 5+ years of experience in cybersecurity with a focus on incident response and threat investigations
• Strong hands-on experience with Splunk, including advanced querying and detection engineering
• Experience with UEBA solutions and behavioral analytics platforms
• Proven expertise in threat hunting methodologies and investigation techniques
• Relevant certifications such as GCIH, GCFA, GCIA, or CISSP are preferred