Incident Responder

What you'll do

• Perform Tier 1 security monitoring around the clock to identify and triage security alerts.
• Prioritize security threats and escalate high-priority incidents to the appropriate teams.
• Support containment, eradication, and recovery efforts during active security incidents.
• Follow established playbooks and guidance from senior team members during incident response.
• Coordinate response efforts with engineering, business, and security teams to improve organizational security.
• Document clear incident notes and summaries to keep stakeholders informed throughout the response process.

What we're looking for

• You must have 2+ years of experience in an IT operations environment or 1+ years of specialized security operations experience.
• You must have foundational knowledge of information security, network fundamentals, and common internet protocols like DNS, HTTP, and TLS.
• You must understand operating system administration and security controls for macOS, Windows, and Linux/Unix.
• You must understand core incident response concepts, including vulnerabilities, threats, actors, and Indicators of Compromise.
• You must be a U.S. citizen (born or naturalized) who does not hold dual citizenship.
• You must be able to pass a U.S. federal government Minimum Background Investigation for a Moderate Public Trust position.
• You should have hands-on experience with security infrastructure such as IDS/IPS, WAFs, firewalls, and antivirus (preferred).
• You should hold relevant certifications (e.g., Security+, BTL1, GCFA, GCIH) or a degree in Computer Science or Cybersecurity (preferred).