Senior Incident Responder
Core
Leading technical response to cyber incidents from triage and containment through recovery and post-incident review.
Role type
Senior hands-on incident responder
Builds
Incident response playbooks and operational procedures
Domain
Cyber security / Security Operations Center
Required skills
Incident response leadership, forensic investigation (endpoint, memory, logs), SIEM and EDR management, third-party security provider management, threat hunting
Preferred skills
Experience with ransomware and BEC incidents, ability to explain technical concepts to non-technical senior leaders
Technologies
Sentinel, Defender, Splunk, CrowdStrike
Responsibilities
Leading technical response to cyber incidents, acting as lead investigator across endpoint/network/identity/cloud, managing third-party security provider escalations, writing playbooks and running tabletops, threat hunting
Seniority
Senior, hands-on IC
