Principal, Cybersecurity Incident Responder - Remote
Core
Leading technical response to significant and complex cybersecurity incidents, establishing priorities, and guiding containment, eradication, and recovery.
Role type
Senior IC cybersecurity incident responder
Builds
Incident response playbooks, detection capabilities, and automated response tooling
Domain
Cybersecurity / Incident Response
Required skills
Incident response leadership, digital forensics, threat hunting, attacker TTPs, risk-based decision making, cross-functional coordination, playbook development, AI/automation integration
Preferred skills
CISSP, GCIH, ECIH, OSIR, GCFA, GCFE, CHFI, CISM, GSOC, advanced threat investigation, enterprise security technologies
Technologies
Endpoint, identity, network, cloud, email security, telemetry, automation, orchestration
Responsibilities
Lead technical response from investigation to recovery, establish technical priorities and make risk-based decisions, partner with detection engineering and forensics teams, develop and improve incident response playbooks, design and facilitate technical tabletop exercises, leverage AI and automation to accelerate response, lead post-incident reviews and drive capability improvements, mentor the incident response team
Seniority
Principal, hands-on IC
