- Remote
- Remote
- 7+ years
Senior operational lead responsible for coordinating advanced incident response, driving resolution, and ensuring effective communication across stakeholders.
Responsibilities
- Conduct advanced incident response analysis to identify attack vectors, assess threats, and investigate malware, data exposure, phishing, social engineering, and other cybersecurity incidents.
- Coordinate incident containment, remediation, and recovery activities to mitigate threats and restore affected systems and services.
- Monitor and analyze security events and alerts from Splunk SIEM and other security tools; review escalated alerts and perform Level 3 incident triage to determine incident type, severity, scope, risk, and appropriate response or escalation.
- Serve as the primary point of coordination for incident management, assigning response actions and coordinating stakeholders, enterprise teams, resources, and timelines during significant incidents, including data breaches and ransomware attacks.
- Create, maintain, and track incident records and ticket queues from initial detection through investigation, remediation, resolution, and closure, ensuring accurate documentation and compliance with federal requirements, departmental policies, and applicable legislation.
Requirements
- Bachelor's degree