Senior Security Incident Responder
Core
Lead technical authority for incident response execution, handling complex, high-impact, and business-critical security incidents across the organization.
Role type
Senior Security Incident Responder (Lead Technical Authority)
Builds
Incident response playbooks, SOPs, and audit-ready forensic documentation
Domain
Cybersecurity / Incident Response / Forensics
Required skills
Enterprise-scale incident response, SIEM/SOAR/EDR/XDR, forensic investigation, root cause analysis, stakeholder coordination, technical leadership
Preferred skills
Incident commander experience, MITRE ATT&CK, threat-led response, GCIH/GCFA/GCED/CISSP certifications
Technologies
SIEM, SOAR, EDR/XDR, Identity platforms, Email security, Cloud telemetry
Responsibilities
Lead investigations for high-severity security incidents, Execute containment/eradication/recovery actions, Serve as primary escalation point, Lead forensic evidence collection and analysis, Review incident handling quality and improve playbooks, Mentor incident responders
Seniority
Senior, hands-on IC with technical leadership
