Hybrid: Senior Cybersecurity Incident Response Engineer

kcura; Illinois; Hybrid; USD 104,000 - 156,000; Full time

Job summary

Relativity is seeking an Advanced Cyber Security Engineer to protect its network and infrastructure. You will investigate threats, provide remediation guidance, and work with top cyber professionals using next-generation tools.

This role requires U.S. citizenship and eligibility for a Public Trust clearance; hybrid work is supported and responsibilities include incident handling, threat hunting, and policy development across global security standards.

Qualifications

• 3+ years in incident response, security operations, incident analysis, or forensics.
• Strong incident response skills including network forensics & memory forensics.
• Knowledge of TCP/IP, cryptography and web application attacks.
• Able to collaborate within a cross-functional team and drive security maturation.
• Understanding attacker methods and mitigating controls.

Responsibilities

• Review, validate, and triage alerts and analyze log data from diverse sensors.
• Assess security event impact using host, cloud, and network indicators.
• Serve as initial escalation point for cyber events and drive investigations.
• Perform near real-time analysis of logs from multiple devices to classify incidents.
• Search telemetry to detect advanced threats evading existing controls.
• Contribute to incident handling policies aligning with industry standards.
• Stay current on emerging threats and apply countermeasures accordingly.
• Serve as subject matter expert on observed malicious activity mechanisms.
• Tune alerts and support junior team members in detection engineering.
• Maintain security infrastructure and ensure tooling is up to date.

Skills

Incident response

Network forensics

Memory forensics

Packet analysis

Threat detection

Cross-functional collaboration

Education

Bachelor’s Degree

Job description

Relativity is seeking an Advanced Cyber Security Engineer to protect its network and infrastructure. You will investigate threats, provide remediation guidance, and work with top cyber professionals using next-generation tools.

This role requires U.S. citizenship and eligibility for a Public Trust clearance; hybrid work is supported and responsibilities include incident handling, threat hunting, and policy development across global security standards.