Security Engineer Incident Response

Skills

About the Role

You will lead incident response across corporate, cloud, and data center environments, from detection and containment through eradication and post-incident review. You will build detection logic, response playbooks, and forensic tooling; investigate attacks using cloud, endpoint, network, and physical-system signals; and establish severity models, on-call rotations, and leadership escalation paths. You will partner with security and IT stakeholders to close gaps identified during investigations and turn incidents into lasting improvements.

Requirements

• Lead major security incidents from initial alert through resolution
• Build detection logic and response playbooks that identify real intrusions
• Conduct digital forensics across cloud, endpoint, and network evidence
• Build or substantially rebuild an incident response program
• Conduct proactive threat hunting
• Write clear incident reports and postmortems for engineers and executives
• Experience defending high-value targets against nation-state threat models
• Cloud-native forensics with AWS or GCP
• Detection engineering and SIEM or SOAR tooling
• Malware analysis or reverse engineering

Responsibilities

• Lead incident response from detection and containment through eradication and post-incident review
• Build detection logic, response playbooks, and forensic tooling
• Investigate attacks by correlating cloud, endpoint, network, and physical-system signals
• Establish the incident response function, including severity models, on-call rotations, and leadership escalation paths
• Partner with security and IT teams to remediate gaps identified through investigations

Benefits

• Equity for full-time roles
• Benefits