Senior Incident Responder

About the opportunity

TENEX is changing how MDR is delivered, and incident response is where that shows up most. As a Senior Incident Responder, you’ll be at the sharp end of our service — leading investigations, containing active threats, and guiding customers through their hardest security moments. You’ll own escalations end to end, shape how we respond as we grow, and build the track record to step into IR leadership as the team scales.

What you’ll do

• Lead incident investigations.
  • Own complex investigations from detection through containment, eradication, and recovery.
  • Drive customer response.
    • Act as a strategic advisor to clients through active incidents as a calm, credible technical lead.
  • Improve response playbooks.
    • Turn lessons from real incidents into better detections and repeatable response procedures.
  • Design and build data collection and preservation toolkit.
    • Work with engineering to automate key processes in the TENEX platform, ensuring reliability and non-repudiation.
  • Build and deliver the custom incident response readiness assessment program, ensuring clients are prepared for an incident by strategically closing existing gaps.
    • Partner across business units.
      • Work with Detection Engineering, Forward Deployment, and Software Engineering to close gaps and drive product improvements.
    • Mentor the analyst team.
      • Provide coaching to SOC analysts to raise the bar on investigation quality.

What you bring

• 5+ years in incident response with at least 2 years as a tier 3 analyst,
  • At least 2 years experience working actual incidents end-to-end,
• Deep knowledge of attacker techniques, forensics, and modern detection tooling (SIEM/SOAR, EDR).
• Cloud incident response experience across AWS, GCP, or Azure.
• Ability to communicate clearly with both technical teams and customers.
• Bonus points:
  • Experience in an MDR/MSSP environment.
  • Threat-hunting or detection-engineering background.
  • Experience presenting findings to executive or client stakeholders.

Education & Certifications

• Bachelor’s degree in Computer Science, Cybersecurity, or Information Technology, or a related field (or equivalent experience).
• Relevant certifications such as GCIH, GCFA, GCIA, or CISSP are a plus.