Senior Cybersecurity Incident Handler
Core
Investigate, coordinate, and resolve enterprise cyber security incidents; improve response operations through automation, scripting, and tooling development.
Role type
Senior Cybersecurity Incident Handler (IC)
Builds
Automated response workflows, Python utilities, CI/CD pipelines, and integrations with security platforms (CrowdStrike, MISP, SIEM).
Domain
Cybersecurity / Incident Response / Endpoint Security
Required skills
Incident triage, evidence collection, endpoint investigation, containment, remediation, Python development, GitHub Actions, Terraform, CrowdStrike Falcon administration, SIEM rule development, technical documentation.
Preferred skills
Velociraptor, YARA, forensic collection workflows, regulated enterprise environments, open-source security tooling.
Technologies
Python, GitHub Actions, Terraform, CrowdStrike Falcon, Next-Gen SIEM, MISP, Slack, Sguil, Confluence, Velociraptor, YARA.
Responsibilities
Triage and investigate security alerts involving endpoints, identities, and malware; develop investigative plans and gather evidence; perform containment and eradication actions; coordinate with detection and intelligence teams; create incident documentation and playbooks; develop secure automation and scripts to improve responder efficiency.
Seniority
Senior, hands-on IC
