Cybersecurity Incident Response Lead
Core
Lead detection, investigation, containment, and recovery of cybersecurity incidents affecting infrastructure, engineering environments, manufacturing systems, and aerospace data.
Role type
Senior IC Cybersecurity Incident Response Lead
Builds
Secure, resilient information systems for reusable launch vehicles
Domain
Aerospace / Cybersecurity
Required skills
Incident response leadership, digital forensics, threat hunting, log correlation, evidence preservation, risk assessment, cross-team coordination, technical mentorship, report writing
Preferred skills
Microsoft Sentinel/Defender/Entra ID, AWS/Azure investigations, disk/memory forensics, malware triage, NIST 800-53/171 compliance, aerospace/OT environment experience
Technologies
SIEM, EDR, KQL, Python, PowerShell, Bash, Microsoft 365, MITRE ATT&CK
Responsibilities
Lead incidents from triage to closure; coordinate responders and assign actions; investigate endpoint/network/cloud activity; collect and preserve forensic evidence; coordinate containment with system owners; maintain IR plans and playbooks; improve detection coverage and automate workflows; conduct threat hunting and post-incident reviews; mentor responders and participate in on-call coverage
Seniority
Senior, hands-on IC
