Senior Incident Responder | Cyber Security | Incident Response

We are looking for a highly analytical and technically skilled Staff Incident Responder to join a global Cyber Security Incident Response team focused on protecting large-scale enterprise infrastructure and responding to advanced security threats.

This role is ideal for someone passionate about cyber security investigations, incident response, digital forensics, and threat analysis, with strong scripting and log analysis capabilities. You will work closely with global security, detection engineering, threat intelligence, and infrastructure teams to investigate incidents, improve response capabilities, and strengthen the organization’s overall security posture.

What You’ll Do

• Respond to cyber security incidents across cloud, endpoint, network, and infrastructure environments
• Investigate and analyze security events to identify root causes, attack vectors, and indicators of compromise
• Perform host forensics, log analysis, malware triage, and network investigations
• Differentiate between true positive and false positive alerts and drive remediation efforts
• Use EDR, SIEM, and cloud security tooling to investigate incidents at scale
• Develop and improve scripts, tooling, and automation for incident response workflows
• Collaborate globally with threat hunting, detection engineering, and threat intelligence teams
• Create technical reports, remediation recommendations, and investigation documentation
• Support and mentor other responders within the CSIRT environment
• Contribute to process improvements and operational maturity initiatives

What We’re Looking For

• 3+ years of hands-on experience in Cyber Security Incident Response
• Strong experience investigating security incidents within infrastructure and cloud environments
• Experience collecting, preserving, and analyzing forensic artifacts
• Strong understanding of:
• Windows, Linux, and macOS internals
• cloud security concepts (AWS, Azure, GCP)
• endpoint, network, and cloud log analysis
• incident triage and investigation methodologies
• Experience with SIEM and EDR platforms
• Ability to interpret large sets of logs and identify malicious activity patterns
• Scripting/programming experience (Python, Bash, Ruby or similar)
• Strong investigative and analytical mindset
• Excellent communication and collaboration skills

Nice to Have

• Malware analysis or reverse engineering exposure
• Threat hunting experience
• Detection engineering experience
• Container/Kubernetes security knowledge
• SOAR or automation platform experience

Additional Information

• Hybrid working model: 3 days/week on site
• Monday–Friday schedule with participation in an on-call rotation
• Collaborative and highly technical global security environment
• Strong focus on innovation, automation, and continuous learning

If you enjoy solving complex security incidents, improving detection and response capabilities, and working in a fast-paced cyber security environment, we’d love to hear from you.

Show more
Show less