Incident Response Lead

About the role

We are seeking a highly skilled and experienced Cyber Security Incident Response Lead to serve as the technical authority during cybersecurity incidents across hybrid cloud and on-prem environments. This role involves leading incident response efforts, coordinating with cross-functional teams, and driving rapid threat containment and eradication.

Responsibilities

• Lead incident response efforts, coordinating with cross-functional teams
• Drive rapid threat containment and eradication
• Manage large-scale incidents affecting cloud environments (AWS preferred)
• Provide technical guidance and mentorship to SOC responders
• Mature incident response programs and enhance threat intelligence capabilities

Requirements

• 10+ years of hands-on cybersecurity experience, including 6+ years in incident response or digital forensics and incident response (DFIR) roles
• Proven leadership in managing large-scale incidents affecting cloud environments
• Deep expertise in digital forensics, log analysis, SIEM tools (e.g., Splunk), EDR platforms (e.g., Trellix), and network analytics
• Excellent communication skills, with the ability to brief senior leadership under pressure
• U.S. Citizenship and ability to obtain Public Trust 6C clearance

Qualifications

• Strong understanding of frameworks such as MITRE ATT&CK, NIST SP 800-61, and the cyber kill chain
• Relevant cybersecurity certifications such as GCIA, GCFA, GCFE, GCIH, GFN, or similar vendor-specific IR/forensic credentials
• Experience mentoring SOC responders and maturing incident response programs
• Knowledge of threat intelligence, threat hunting, and enterprise logging in cloud environments

Skills

• Strategic thinking
• Passion for maturing SOC capabilities

Benefits

• Competitive salary based on experience
• Comprehensive health, dental, and vision coverage
• 401(k) retirement plans
• Support of a dedicated team advocating for your career growth

Pay

Competitive salary based on experience

Schedule

Teleworker

Contact

For more information about this opportunity, please contact [Contact Information].