Senior Incident Responder, Global CSIRT
Core
Senior Incident Responder leading end-to-end investigation and response to security incidents, including adversary activity, insider threats, and web application attacks across on-premises and multi-cloud environments.
Role type
Senior hands-on IC incident responder
Builds
Incident response playbooks, detections, and automation (SOAR, detection-as-code)
Domain
Cybersecurity / Cloud Security
Required skills
Host and network forensics (Windows, macOS, Linux), Cloud security (AWS, Azure, GCP), Threat landscape analysis (MITRE ATT&CK), Incident response lifecycle (triage, containment, eradication, recovery), Security automation (SOAR, detection-as-code)
Preferred skills
Malware analysis, Detection engineering, Offensive security, AI/ML for security operations
Technologies
SOAR, MITRE ATT&CK, AWS, Azure, GCP, CI/CD pipelines
Responsibilities
Investigate and respond to security incidents end to end; Lead high-severity incidents; Improve playbooks and automation; Mentor newer analysts
Seniority
Senior, hands-on IC
