Senior Engineer, Incident Response Cyber Security Operations
Core
Senior escalation point and Incident Response Commander for significant cybersecurity events, leading complex investigations and strategic cyber defense initiatives.
Role type
Senior IC incident response engineer (cyber security operations)
Builds
Next-generation security capabilities, incident response playbooks, and automated detection workflows
Domain
Financial services / Cybersecurity
Required skills
Malware analysis, Threat hunting, Identity security, Endpoint Detection and Response, Cloud Security, Network security, Digital forensics, SIEM/XDR triage, Automation/SOAR development
Preferred skills
MITRE ATT&CK familiarity, Threat intelligence, Detection engineering
Technologies
Microsoft Sentinel, Defender XDR, Splunk, CrowdStrike, Azure, AWS
Responsibilities
Lead strategic cybersecurity initiatives to enhance Security Operations and Incident Response capabilities; Act as primary or deputy Incident Commander during major cyber security incidents; Guide analysts through complex investigations using SIEM, EDR, identity, cloud, and network telemetry; Act as a senior technical mentor for Tier 1, Tier 2, and Tier 3 analysts; Develop and maintain incident response playbooks, runbooks, and operating procedures; Partner with Detection Engineering to identify monitoring gaps and improve detection coverage across MITRE ATT&CK tactics and techniques.
Seniority
Senior, hands-on IC with mentorship responsibilities
