Staff Cyber Incident Response Engineer

What you'll do

• Conduct host forensics, network forensics, log analysis, and malware triage to support incident investigations.
• Develop scripts, tools, and methodologies to automate and improve investigation processes.
• Provide leadership and mentorship as a technical resource for the incident response team.
• Draft detailed reports, assign remediation actions, and implement process improvements with internal and external partners.
• Create and deliver training sessions and presentations for both technical and non-technical audiences.
• Participate in and conduct tabletop exercises and incident simulations to ensure organizational readiness.
• Perform proactive threat hunting across cloud and enterprise networks to detect activities that evade existing tools.

What we're looking for

• Over 7 years of experience in end-to-end incident response processes and leading complex incidents.
• Expertise in Windows analysis, forensics, and deep understanding of Linux, MacOS, and Windows internals.
• Experience working with container environments such as Kubernetes and Docker.
• Hands-on experience with various Endpoint Detection and Response (EDR) solutions.
• Extensive experience defending or administering cloud environments across AWS, Azure, and GCP.
• Proficiency in bash and at least one interpreted programming language like Python or Ruby.
• Ability to write complex searches or analytics for popular Security Information and Event Management (SIEM) solutions.
• Experience performing log analysis from cloud, network, and endpoint devices.