Principal Incident Response Engineer

Job Summary

Leading major cybersecurity incidents, the full-time remote Principal Incident Response Security Engineer will manage detection, containment, and recovery efforts while developing incident response playbooks and optimizing security monitoring across the enterprise.

Key responsibilities

• Lead and manage major cybersecurity incidents from detection through post-incident review
• Develop and maintain incident response playbooks, runbooks, and escalation procedures
• Conduct forensic investigations and collaborate with cross-functional teams to enforce secure configurations

Required qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field
• Current and active CISSP Certification
• 6+ years of experience in enterprise cybersecurity
• 5+ years of experience with EDR, SIEM, and email/network security
• 3+ years of experience with cloud environment security and scripting/coding