Incident Response Lead — AI-Driven Cyber Defense

NorthMark Strategies; Dallas (TX); On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Lunch stipend

Employer-paid medical, dental, vision

401(k) match 100% up to 6%

Optional benefits: HSA/FSA, etc.

25 days PTO + 12 holidays

Job summary

NorthMark Strategies is seeking a Cyber Defense Incident Responder to lead and execute the full incident response lifecycle across enterprise and cloud environments. You will act as Incident Commander for high-impact events, drive rapid containment actions, and improve detection fidelity with AI-assisted tools.

Responsibilities include real-time decision-making, cross-functional coordination, and delivering executive-ready reports.

Qualifications

• 6+ years of hands-on experience in Cybersecurity Operations / Incident Response.
• Strong experience within Microsoft Security Ecosystem.
• Proven experience investigating incidents across cloud (Azure/AWS), identity, endpoint, and email.
• Demonstrated experience integrating AI/automation in security operations.
• Strong proficiency in KQL for threat hunting and investigation.
• Excellent written and verbal communication, including executive-level reporting.
• Bachelor’s degree in Cybersecurity, IT, or related field, or equivalent experience.
• Certifications CISSP, CISM, CISA, or GIAC.

Responsibilities

• Act as Incident Commander for high-impact security incidents, coordinating cross-functional response efforts.
• Lead the full Incident Response lifecycle with focus on reducing time-to-detect and time-to-contain.
• Leverage MITRE ATT&CK and Cyber Kill Chain to guide investigations and response strategies.
• Lead real-time decision-making during active incidents, ensuring business risk is understood and mitigated.
• Provide executive-ready incident reports, including impact assessments and actions.
• Mentor junior analysts and collaborate with IT, Legal, HR, and business stakeholders.

Skills

Incident response

Microsoft Security

AI in SecOps

KQL

Executive reporting

Incident leadership

Stakeholder influence

Education

Bachelor's degree in Cybersecurity or IT

CISSP/CISM/CISA or GIAC certs

Job description

NorthMark Strategies is seeking a Cyber Defense Incident Responder to lead and execute the full incident response lifecycle across enterprise and cloud environments. You will act as Incident Commander for high-impact events, drive rapid containment actions, and improve detection fidelity with AI-assisted tools.

Responsibilities include real-time decision-making, cross-functional coordination, and delivering executive-ready reports.