Lead, Incident Response

Prudential Financial

Confirmed live today High trust

Quick summary

Work type
On-site
Location
Newark, NJ
Salary
$123,700–$204,100 / yr
Employment
Full-time
Posted
7 days ago
Freshness
Confirmed live today

Market check

Salary context

Competitive pay

How this pay compares to similar roles

Similar $179k
This role $164k
$112k $231k
below market most similar roles pay here above market

This role pays less than 65% of similar roles. Most pay $155,261–$201,800 — the blue band above. At the midpoint, this role pays about $164k versus about $179k for comparable roles.

Based on 240 similar postings.

Employer

About Prudential Financial

Prudential Financial is a global financial services leader and premier active global investment manager.

Prudential Financial currently has 44 open roles on FindRole.

Listed pay typically runs $123,700–$202,050 across 18 roles with salary data.

Most-posted roles

View all roles at Prudential Financial

At a glance

TL;DR · Lead, Incident Response

JOB TITLE: Lead, Incident Response The Lead, Incident Response serves as an individual technical contributor within the Cyber Defense & Response team. This role involves conducting digital forensic and incident response analysis, responding to security incidents, assisting with threat hunting operations, and performing incident readiness activities in a global corporate environment. The successful candidate will perform enterprise-wide investigations across on-prem and cloud technologies including Active Directory/Entra, M365, Azure, and AWS. Daily tasks include leveraging Splunk’s SPL and Microsoft’s KQL, utilizing EDR tooling, and performing log, host, memory, and network-based forensics. Key responsibilities include malicious code triage, developing scripts and automation workflows in XSOAR, and using forensic software suites like X-Ways or EnCase. Expertise in Python, PowerShell, Bash, and frameworks like MITRE ATT&CK is required to solve complex cybersecurity problems.

What you'll do

  • Conduct digital forensic and incident response analysis for global security incidents.
  • Perform enterprise-wide investigations across on-prem and cloud technologies like Azure and AWS.
  • Utilize Splunk (SPL) and Microsoft Kusto (KQL) to support investigative workflows.
  • Execute log, host, memory, and network-based forensics during active investigations.
  • Perform malicious code triage to support incident response activities.
  • Develop scripts, queries, and automation workflows in support of XSOAR.
  • Share key investigative details with global stakeholders and business leaders.
  • Lead team-driven projects to advance forensic and response capabilities across the enterprise.

What we're looking for

  • 5 plus years of experience responding to cyber incidents in large corporate/enterprise environments.
  • Bachelor's degree in Digital Forensics, Information Security, Computer Science, Information Technology, or a related discipline.
  • Experience using enterprise forensic software suites such as X-Ways or EnCase.
  • Knowledge of common scripting languages including Python, PowerShell, and Bash.
  • Industry standard certifications such as CCE, EnCE, GCFE, GCFA, GCIH, GREM, GNFA, or GPEN.
  • Comprehensive understanding of adversarial threat frameworks such as MITRE ATT&CK and Lockheed Martin’s Cyber Kill Chain.
  • Ability to perform investigations using Splunk (SPL), Kusto Query Language (KQL), and EDR tooling.
  • Strong verbal and written communication skills to share investigative details with global stakeholders and business leaders.

More like this

Similar roles

Lead Detection Engineer, Cyber Defense & Response

Prudential Financial

Newark, NJ 36 days ago
Splunk Enterprise Security SPL KQL Python SOAR CI/CD MITRE ATT&CK Cyber Kill Chain Incident Response Threat Hunting Cyber Threat Intelligence Digital Forensics Windows Linux macOS Security Automation Telemetry Pipelines

Lead, Insider Risk - Cyber Defense & Response

Prudential Financial

Newark, NJ 105 days ago
Digital Forensics SIEM Behavioral Analytics User Activity Monitoring Threat Intelligence Data Integration Cyber Threat Intelligence Forensic Analysis Software CISSP GCFA GCFR GCTI CITPM

Lead, Cyber Defense & Response

Prudential Financial

Newark, NJ 82 days ago
Splunk KQL SIEM XDR AWS Azure M365 Active Directory Entra MITRE ATT&CK Cyber Kill Chain Incident Response Detection Engineering Threat Hunting
5+ yrs exp

Lead Detection & Response Platform Engineer

CoStar Group

Arlington, VA +1 7 days ago $155,000–$245,000
SIEM XDR SOAR Python PowerShell KQL SPL REST APIs JSON Git Terraform Bicep ARM Azure AWS Sentinel Defender XDR Logic Apps Entra ID Active Directory CI/CD MITRE ATT&CK NIST SP 800-61
8+ yrs exp Hybrid

Lead Threat Hunter

Allstate

Remote (IL) 3 days ago $120,000–$175,000
Threat Hunting MITRE ATT&CK SIEM EDR XDR Python PowerShell Go Bash AWS Azure M365 Splunk Sentinel Elastic CrowdStrike Defender SentinelOne Tanium KQL SPL Sigma YARA Snort Suricata SOAR TCP/IP DNS TLS HTTP SMTP Kubernetes AI LLM RAG Atomic Red Team CALDERA Stratus Red Team Diamond Model Pyramid of Pain Kill Chain MITRE ATLAS OWASP Top 10 for LLM Applications
7+ yrs exp Remote

Lead, Incident Response

Salesforce

McLean, VA +1 53 days ago
Incident Response SOAR Detection-as-Code AWS Azure GCP CI/CD Network Forensics Malware Analysis Detection Engineering MITRE ATT&CK Linux Windows macOS AI/ML
8+ yrs exp Hybrid