Incident Response Engineer

The Principal Incident Response Engineer plays a crucial role in enhancing an organization's cybersecurity posture. This position focuses on incident readiness and response, ensuring the organization is prepared for high-profile incidents through tailored strategies and comprehensive planning.

Key Responsibilities

• Conduct readiness reviews and customize incident response plans.
• Design and deliver effective incident response playbooks.
• Lead workshops, drills, and tabletop exercises to improve incident response capabilities.
• Guide containment, remediation, and recovery efforts during incidents.
• Lead Digital Forensics and Incident Response (DFIR) investigations across various platforms, including host, network, and cloud environments.
• Provide briefings to leadership on incident findings and risk recommendations.

Required Skills & Qualifications

• 12–15 years of experience in cybersecurity with a focus on incident response and readiness.
• Proven ability to lead high-profile incidents and readiness initiatives.
• Experience with forensic tools such as EDR, log analysis, and malware analysis.
• Familiarity with operating systems and cloud services, including Windows, Linux, Azure, AWS, and M365.
• Strong analytical and problem-solving skills.
• Excellent mentoring and communication skills, including the ability to conduct executive briefings.