Senior Cybersecurity Incident Responder

US Bank

Confirmed live today High trust
Closes in 3 days Hybrid

Quick summary

Work type
Hybrid
Location
Minneapolis, MNAtlanta, GACincinnati, OHCharlotte, NCIrving, TX
Salary
$119,765–$140,900 / yr
Employment
Full-time
Posted
2 days ago
Freshness
Confirmed live today
Closes
Nov 9, 2026 (soon)

Market check

Salary context

Below market

How this pay compares to similar roles

Similar $177k
This role $130k
$109k $224k
below market most similar roles pay here above market

This role pays less than 89% of similar roles. Most pay $150,574–$202,643 — the blue band above. At the midpoint, this role pays about $130k versus about $177k for comparable roles.

Based on 240 similar postings.

Employer

About US Bank

U.S. Bank (U.S. Bancorp) is the fifth-largest bank in the United States, providing retail banking, corporate and commercial banking, wealth management, and payment services to millions of customers. Industry: Banking & Financial Services

US Bank currently has 48 open roles on FindRole.

Listed pay typically runs $119,765–$140,900 across 33 roles with salary data.

Most-posted roles

View all roles at US Bank

At a glance

TL;DR · Senior Cybersecurity Incident Responder

The Senior Cybersecurity Incident Responder joins the Cybersecurity Incident Response team to lead hands-on investigations of escalated cybersecurity events. This role involves performing technical analysis to determine the scope, impact, and root cause of security incidents beyond initial triage. Responsibilities include analyzing security logs and telemetry, reconstructing incident timelines, and identifying indicators of compromise across endpoints, networks, web applications, and firewalls. The candidate will perform digital forensics and technical analysis using SIEM and Endpoint Detection and Response (EDR) technologies, specifically Microsoft Sentinel, Microsoft Defender, and Akamai security tools. Key skills include network security concepts, packet analysis, and experience with threat intelligence platforms and security orchestration. The position requires independently managing complex investigations, documenting findings, and supporting containment and recovery activities during significant cybersecurity incidents.

What you'll do

  • Lead hands-on investigations of escalated cybersecurity events and incidents from initial escalation through resolution.
  • Analyze security logs, alerts, and telemetry to identify malicious activity and determine the root cause.
  • Reconstruct incident timelines to identify attack vectors, scope, and overall impact.
  • Perform digital forensics and technical analysis to support ongoing cybersecurity investigations.
  • Utilize SIEM and EDR platforms to investigate suspicious activity across endpoints, networks, and web applications.
  • Identify indicators of compromise (IOCs) and document technical findings for stakeholders.
  • Support containment, remediation, and recovery activities during active cybersecurity incidents.
  • Participate in an on-call rotation to provide after-hours support for significant security incidents.

What we're looking for

  • 4+ years of relevant hands-on cybersecurity Incident Response, Incident Handling, or Digital Forensics and Incident Response (DFIR) experience.
  • Typically a Bachelor's degree or equivalent work experience.
  • Typically five or more years of relevant experience.
  • Demonstrated experience personally investigating cybersecurity incidents from escalation through conclusion.
  • Hands-on experience using SIEM platforms and EDR technologies.
  • Skills in security log analysis, network packet analysis, and investigating activity across endpoints, networks, web applications, and firewalls.
  • Ability to independently manage complex investigations, reconstruct timelines, and participate in an on-call rotation.
  • Experience with Microsoft Sentinel, Microsoft Defender, Akamai, threat hunting, or malware analysis (preferred).

More like this

Similar roles

Incident Response Analyst, Senior

Booz Allen Hamilton

Bethesda, MD 55 days ago
Splunk SIEM EDR IDS IPS SOAR Microsoft Defender Vulnerability Management Digital Forensics Packet Analysis Threat Hunting Behavioral Analytics Threat Intelligence Identity and Access Management Container Security API Security Log Analysis Incident Response Playbooks
5+ yrs exp

Senior Incident Responder, Global CSIRT

Salesforce

McLean, VA +1 2 days ago $148,500–$223,900
Incident Response SOAR MITRE ATT&CK AWS Azure GCP CI/CD Malware Analysis Detection Engineering Forensics Linux Windows macOS AI LLM Salesforce Platform SaaS
5+ yrs exp Hybrid

Senior Incident Response Analyst

Leidos

Arlington, VA 17 days ago $107,900–$195,050
Incident Response EDR IDS SIEM Python PowerShell Bash Malware Analysis Computer Forensics Windows Linux Firewalls VPN Proxies Load Balancers ATT&CK Framework Cyber Kill Chain FISMA
8+ yrs exp

Senior Incident Response Analyst

Leidos

Arlington, VA 11 days ago $107,900–$195,050
Incident Response EDR IDS SIEM Python PowerShell Bash Malware Analysis Computer Forensics Windows Linux Firewalls Proxies Load Balancers VPN ATT&CK Framework Cyber Kill Chain FISMA
8+ yrs exp

Senior Incident Response Analyst

Leidos

Arlington, VA 47 days ago $131,300–$237,350
Incident Response EDR IDS SIEM Python PowerShell Bash Malware Analysis Computer Forensics Windows Linux Firewalls Proxies Load Balancers VPN ATT&CK Framework Cyber Kill Chain FISMA
10+ yrs exp

Incident Response Analyst, Mid

Booz Allen Hamilton

Bethesda, MD 63 days ago $62,000–$141,000
Splunk SIEM EDR IDS/IPS SOAR Digital Forensics Threat Hunting Packet Analysis Malware Triage Vulnerability Management Firewalls Identity and Access Management API Security Container Security Log Analysis Behavioral Analytics Threat Intelligence
2+ yrs exp