Cybersecurity Incident Responder

DivIHN Integration Inc; Saint Paul (MN); On-site; USD 70,000 - 100,000; Full time

Job summary

DivIHN Integration Inc in Saint Paul, Minnesota is seeking a cybersecurity professional to lead incident response activities and protect technology assets. The role involves analyzing security incidents and working cross-functionally with IT and security teams.

The ideal candidate requires a Bachelor’s degree in Information Technology and 3 years of relevant experience, including proficiency with security monitoring tools. This position offers an opportunity to contribute to the improvement of incident response processes and frameworks.

Qualifications

• 3 years of technical experience in a Security Operations Center (SOC) or cybersecurity-related role.
• Demonstrated experience with security monitoring and investigation tools.
• Strong understanding of network protocols and enterprise security controls.

Responsibilities

• Investigate, analyze, and respond to security incidents.
• Monitor security alerts and perform triage on security events.
• Conduct forensic analysis to determine the root cause of incidents.
• Document incidents thoroughly, including timelines and remediation actions.

Skills

Incident response

Cybersecurity analysis

Forensic analysis

Monitoring security tools

Documentation

Education

Bachelor’s degree in Information Technology

Tools

SIEM (e.g., Splunk)

EDR platforms

Intrusion detection systems

Job description

Job Description

Only W2 candidates are eligible for this position. Third‑party or C2C candidates will not be considered

Primary Job Function

• Responsible for investigating, analyzing, and responding to security incidents across the organization’s environment.
• Leads or executes complex incident response activities, adapts standard procedures to evolving threats.
• Plays a critical role in protecting the organization’s technology assets by identifying, analyzing, and responding to cybersecurity threats that may result in unauthorized access, misuse, or disruption of services.

Core Job Responsibilities

• Monitor security alerts and events from various tools (SIEM, EDR, IDS/IPS, etc.) to identify potential incidents.
• Perform triage, correlation, and in-depth analysis of security events, including indicators of compromise (IOCs), malware activity, phishing attempts, and suspicious network behavior.
• Conduct forensic analysis on systems, networks, and endpoints to determine root cause and scope of incidents.
• Develop and implement response strategies to mitigate immediate threats and prevent recurrence.
• Support the implementation, tuning, and monitoring of security tools such as SIEM, EDR, firewalls, and intrusion detection systems.
• Ensure security controls are effectively detecting and preventing malicious activity.
• Validate and enhance alerting mechanisms to reduce false positives and improve detection accuracy.
• Document incidents thoroughly, including timelines, impact assessments, and remediation actions.

Position Accountability & Scope

• Accountable for timely detection, analysis, and response to cybersecurity incidents to minimize organizational risk and business disruption.
• Works under moderate supervision but exercises independent judgment when handling incidents and escalating issues.
• Responsible for maintaining the confidentiality, integrity, and availability of organizational systems and data.
• Collaborates cross‑functionally with IT, network, security engineering, and business teams during incident response activities.
• Contributes to continuous improvement of incident response processes, playbooks, and detection capabilities.
• Ensures compliance with internal security policies, standards, and regulatory requirements.
• 3 years of technical experience in a Security Operations Center (SOC), incident response, or cybersecurity-related role.
• Demonstrated experience with security monitoring and investigation tools (e.g., SIEM such as Splunk, EDR platforms, email security tools).
• Strong understanding of network protocols, operating systems, enterprise security controls and frameworks such as MITRE ATT&CK.
• Bachelor’s degree in Information Technology or similar area; or equivalent work experience.