Senior Incident Response Engineer - Cyber Security Ops

Cyber Security Jobs; Limerick; Hybrid; EUR 90,000 - 130,000; Full time

Job summary

Northern Trust is seeking a senior cybersecurity professional to lead investigations, mentor analysts, and drive improvements across incident response, detection, automation and AI-enabled security operations. You will work with security architects and senior stakeholders to deliver next‑generation security capabilities and coordinate escalation during major incidents.

The role requires strong experience with MITRE ATT&CK, SIEM and cloud security, plus the ability to develop playbooks, runbooks

Qualifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, or related field.
• Relevant industry certifications preferred.
• Experience leading technical investigations and developing cyber defence capabilities.

Responsibilities

• Lead strategic cybersecurity initiatives to enhance Security Operations and Incident Response.
• Act as primary or deputy Incident Commander during major cyber security incidents.
• Mentor Tier 1–3 analysts and drive automation/orchestration improvements.
• Collaborate with Detection Engineering to improve detection coverage and MITRE ATT&CK mapping.
• Engage with stakeholders and executive teams with clear security updates.
• Evaluate new security products and emerging technologies.

Skills

Malware Analysis

Threat Hunting

Identity Security

Endpoint Detection and Response

Cloud Security (Azure/AWS)

Network Security

Digital Forensics

MITRE ATT&CK

SOAR platforms

Education

Bachelor's degree in Cybersecurity/Information Security/CS

Industry certifications

Tools

Microsoft Sentinel

Defender XDR

Splunk

CrowdStrike

SOAR platforms

Job description

Northern Trust is seeking a senior cybersecurity professional to lead investigations, mentor analysts, and drive improvements across incident response, detection, automation and AI-enabled security operations. You will work with security architects and senior stakeholders to deliver next‑generation security capabilities and coordinate escalation during major incidents.

The role requires strong experience with MITRE ATT&CK, SIEM and cloud security, plus the ability to develop playbooks, runbooks