Senior Cyber Incident Response Engineer
New
This position has been designated as fully remote, meaning that the position is expected to contribute from a non-NBCUniversal worksite, most commonly an employee’s residence.Full-TimeSenior
SalarySalary range: $140,000 - $175,000 (bonus eligible)
Apply NowOpens the employer's application page
Job Details
- Experience
- 5+ years of relevant cybersecurity experience
- Required Skills
- PythonBash
Requirements
- 5+ years of relevant cybersecurity experience in incident response, DFIR, detection engineering, threat hunting, or SOC escalation.
- 2+ years of security automation or cyber defense engineering experience.
- Strong proficiency with Python, PowerShell, Bash, or similar scripting languages.
- Knowledge of SIEM, SOAR, EDR, Data Lake, and enterprise security tooling and methodologies.
- Experience building and maintaining API integrations across security and enterprise platforms.
- Working knowledge of SIEM query languages (SPL, KQL, SQL).
- Experience with EDR response actions, investigation workflows, and endpoint containment.
- Strong understanding of endpoint, identity, network, cloud, email, and SaaS telemetry.
- Ability to design for scale, reliability, and reduced response time in production security environments.
- Bachelor’s degree in a relevant field or equivalent practical experience.
Responsibilities
- Design and build automated evidence collection capabilities to increase investigation speed and completeness.
- Create and maintain SOAR playbooks orchestrating investigation, enrichment, containment, notification, and recovery workflows.
- Integrate SIEM, EDR, IAM, cloud, email, and threat intelligence platforms for unified response.
- Develop and deploy response tooling, including AI-assisted solutions, across cloud, endpoint, identity, and SaaS platforms.
- Identify and automate repeated manual analyst tasks to improve scalability and repeatability.
- Design and optimize incident response plans, identifying gaps and developing readiness strategies.
- Lead or support complex investigations into host, network, identity, and cloud artifacts to determine scope and root cause.
- Participate in an incident response on-call rotation, including weekend coverage.
View Full Description & ApplyYou'll be redirected to the employer's site
