Incident Response Lead: SIEM & Threat Intel Expert

Compassell; Florida; Hybrid; USD 107,000 - 131,000; Full time

Job summary

Comtec Consultants is seeking an IT Security Incident Response Lead in Florida to oversee tier 2 incident investigations, reporting, and SIEM workflow management. You will guide threat hunting assignments, ingest threat intelligence feeds, and maintain alert rules while analyzing monthly IR metrics.

The role requires 7+ years IT experience, 4+ years in incident response, and strong Cisco CLI knowledge. Excellent communication and mentoring skills are essential for success.

Qualifications

• 7+ years of information technology experience.
• 4+ years of incident response experience.
• Thorough understanding of system logs, log analysis, and packet analysis.
• Functional knowledge of Cisco routers and switches and CLI configurations.
• In-depth knowledge of SIEM functions threat hunting, correlation of events, dashboard creation, metrics development, and creating alerts based on threat intelligence and IOCs.
• Thorough understanding of 2nd and 3rd order vulnerability mitigations beyond system patching cycles.
• Ability to prioritize vulnerability mitigation efforts based on risk assessments.
• Must have strong written and oral communication skills, be self-motivated and a self-starter, maintain a curiosity and desire to learn, and be able to work well in a team environment.

Responsibilities

• Investigate tier 2 security incidents and report findings.
• Manage SIEM front-end including workflow management, threat hunting assignments, threat intelligence ingests, rule/alert creation and maintenance.
• Complete monthly metrics collection and analysis of IR team effectiveness.
• Provide subject matter expertise, on-the-job training, and training materials for junior incident response analysts.

Skills

Incident response

SIEM operation

Threat hunting

Log analysis

Threat intelligence

Vulnerability assessment

Analytical thinking

Team collaboration

Education

Bachelor's Degree in Computer Science / IT / Cyber Security

Tools

Cisco CLI

SIEM tooling

Job description

Comtec Consultants is seeking an IT Security Incident Response Lead in Florida to oversee tier 2 incident investigations, reporting, and SIEM workflow management. You will guide threat hunting assignments, ingest threat intelligence feeds, and maintain alert rules while analyzing monthly IR metrics.

The role requires 7+ years IT experience, 4+ years in incident response, and strong Cisco CLI knowledge. Excellent communication and mentoring skills are essential for success.