Senior Cybersecurity Incident‐Response Lead

When attackers breach the perimeter, you’re the calm in the digital storm. As our Senior Incident‑Response Lead, you will command high‑stakes investigations, dismantle advanced threats, and turn chaos into crystal‑clear recovery plans. If parsing volatile memory, reverse‑engineering malware, and briefing C‑suites on nation‑state actors sounds like Tuesday, we want you on the front line.

Responsibilities

• Orchestrate end‑to‑end incident‑response engagements, from evidence acquisition through post‑mortem analysis.
• Lead a cross‑functional “tiger team” of threat hunters, forensic analysts, and SOC engineers.
• Build and refine playbooks, ensuring zero‑trust and MITRE ATT&CK alignment across all response activities.
• Conduct root‑cause analysis and produce executive‑level reports with actionable remediation steps.
• Drive purple‑team exercises and tabletop drills for critical‑infrastructure and government clients.
• Mentor junior analysts, raising the bar for threat‑detection precision and response velocity.

Preferred Qualifications

• 7+years in incident response or digital forensics, with documented breach‑containment wins.
• Expertise in network forensics, memory analysis, and reverse engineering (e.g., IDAPro, Ghidra).
• Certifications such as GIACGCFA/GCIA, GREM, or CISSP.
• Hands‑on experience with SIEM, EDR, and threat‑intel platforms (Splunk, Sentinel, CrowdStrike, MISP).
• Fluency in at least one scripting language (Python, PowerShell, or Go) for tool automation.
• Confidence briefing executives and regulators under extreme time pressure.

Location

Hybrid