Lead, Cyber Threat Response
Core
Lead incident coordination, security event investigation, and security operations for cyber threats.
Role type
Junior leadership IC cybersecurity incident responder
Builds
Incident response playbooks, workflows, and response documentation
Domain
Cybersecurity / Incident Response
Required skills
Incident response coordination, threat investigation, digital forensics, threat hunting, vulnerability management, SIEM/EDR/SOAR case management, MITRE ATT&CK/NIST frameworks, OS/cloud/networking/identity/endpoint security concepts
Preferred skills
GCIH, GCFA, GCIA, GCTI, OSCP, CHFI certifications
Technologies
SIEM, EDR, SOAR, case management tools, digital forensic tools
Responsibilities
Investigate threat activity by reviewing evidence, assessing impact, and documenting findings; Coordinate incident response activities across triage, containment, remediation, recovery, and closure; Lead response efforts for emerging threats including zero-day vulnerabilities and third-party breaches; Collaborate with internal teams and external partners for timely decision-making and resolution; Maintain playbooks, workflows, and response documentation; Support tabletop exercises, lessons learned, and after-action reviews; Lead or support on-call emergency cyber incident response activities outside normal business hours; Support insider threat reviews, threat hunting, and executive protection activities by analyzing security data; Assist with digital forensics and eDiscovery through evidence collection, preservation, analysis, and documentation
Seniority
Junior leadership, hands-on IC
