We are seeking an IT Security Engineer – Incident Response for a 12-month contract position (Remote, US).
You will act as a Tier 2 incident responder, investigating, managing, and driving complex security incidents through resolution. You will take ownership of escalated incidents from initial triage through containment, eradication, recovery, and closure. Your responsibilities will include investigating security events to determine whether they constitute a true security incident based on complexity, risk, scope, and potential business impact, and performing comprehensive analysis of endpoint, network, cloud, and security telemetry to determine root cause, scope, and impact.
Responsibilities
Act as a Tier 2 incident responder responsible for investigating, managing, and driving complex security incidents through resolution
Take ownership of escalated incidents from initial triage through containment, eradication, recovery, and closure
Investigate security events to determine whether they constitute a true security incident based on complexity, risk, scope, and potential business impact
Perform comprehensive analysis of endpoint, network, cloud, and security telemetry to determine root cause, scope, and impact
Leverage CrowdStrike, Splunk, and other SIEM/EDR platforms to investigate and correlate security signals
Qualifications
Required
5+ years of experience in cybersecurity, security operations, incident response, or a closely related field
Show the full description
Strong hands-on experience serving as an incident responder, preferably within a Tier 2 or similarly escalated SOC environment
Demonstrated ability to independently manage complex security incidents from escalation through resolution
Strong experience with CrowdStrike