Incident Response, Senior Associate
Core
Senior Associate providing hands-on technical investigation, containment, and root cause analysis for security incidents across endpoints, identity, email, network, and cloud environments.
Role type
Senior IC incident response engineer
Builds
Incident response playbooks, technical timelines, and root cause analyses
Domain
Cybersecurity / Incident Response / Digital Forensics
Required skills
Incident response triage, digital forensics, evidence collection and chain-of-custody, root cause analysis, containment and eradication, technical writing, SIEM query languages, cloud audit logging, attacker tradecraft knowledge
Preferred skills
GCIH/GCFA/GCFE/GNFA/OSCP certifications, memory and disk forensics, scripting (Python/PowerShell/KQL), malware triage, insider risk investigation, network traffic analysis, cloud platform architecture (Azure/AWS/M365)
Responsibilities
Perform deep-dive analysis of escalated alerts and suspected incidents; Reconstruct attacker and user activity into a defensible timeline; Determine the scope of compromise including affected accounts and systems; Recommend and support containment actions such as account disablement and host isolation; Collect and preserve digital evidence from endpoints and cloud services; Produce clear technical reports for legal and regulatory scrutiny; Maintain and improve technical response playbooks and tooling
Seniority
Senior, hands-on IC