Incident Response Lead

View full description

Requirements:

• Bachelor’s Degree in Computer Science, Information Security, Engineering, or relevant field.
• 5+ years of incident response or digital forensics experience.
• Demonstrated knowledge of network threats, attacks, and intrusion tactics.
• Knowledge of TCP/IP protocols and security applications.
• Experience with forensic/log analysis tools like Velociraptor and ELK.
• Experience with EDR tools such as CrowdStrike and Carbon Black.
• Knowledge of industry frameworks like NIST, HIPAA, and PCI.
• Self-motivated and strong communication skills.

Responsibilities:

• Drive incident response engagements to guide customers through forensic investigations and incident containment.
• Coordinate incident response assistance from team members and vendors.
• Investigate data breaches and analyze systems to identify Indicators of Compromise (IOCs).
• Examine logs to identify evidence of malicious activity.
• Provide case reporting across audiences with technical detail appropriate for both technical and business contexts.
• Evaluate customer security programs and recommend enhancements.
• Track emerging security practices and contribute to internal processes.