Senior Incident Handler

This is a fully remote position, open to applicants in United States.

📋 Description

• Act as the primary responder during critical incidents.

• Coordinate efforts among analysts, infrastructure teams, application owners, legal departments, and third-party partners.

• Serve as a reliable voice during high-severity situations.

• Direct in-depth investigations into malware, identity theft, and ransomware incidents.

• Assist in modernizing the Security Operations Center (SOC) through automation and AI-enhanced tools.

• Elevate the team's response standards by conducting meaningful after-action reviews.

⛳️ Requirements

• Over 5 years of experience in cybersecurity operations or incident response.

• Experience in the financial services or insurance sectors is advantageous.

• Proven capability to function as an incident commander.

• Strong knowledge of network security, EDR/XDR, log analysis, and forensic investigations.

• Proficient with SIEM, forensic tools, and scripting/automation (Python, PowerShell).

• Excellent written and verbal communication skills; able to establish credibility with both engineers and executives.

• Passionate about SOAR, machine learning-based tools, and large language models.

🏝️ Benefits

• Comprehensive technology setup that includes a laptop, multiple monitors, a headset, keyboard, and mouse.

• Monthly connectivity reimbursement to help cover internet expenses.